<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 22 Jul 2026 23:28:14 +0000</lastBuildDate>
    <item>
      <title>00cc4889-c253-4d73-97d2-f274081ab4fb</title>
      <link>https://db.gcve.eu/sighting/00cc4889-c253-4d73-97d2-f274081ab4fb/export</link>
      <description>{"uuid": "00cc4889-c253-4d73-97d2-f274081ab4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26155", "type": "seen", "source": "https://t.me/cibsecurity/25123", "content": "\u203c CVE-2020-26155 \u203c\n\nMultiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in conjunction with these weak permissions, could enable an attacker to perform a DLL hijacking attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:18.000000Z"}</description>
      <content:encoded>{"uuid": "00cc4889-c253-4d73-97d2-f274081ab4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26155", "type": "seen", "source": "https://t.me/cibsecurity/25123", "content": "\u203c CVE-2020-26155 \u203c\n\nMultiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in conjunction with these weak permissions, could enable an attacker to perform a DLL hijacking attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:18.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/00cc4889-c253-4d73-97d2-f274081ab4fb/export</guid>
      <pubDate>Thu, 18 Mar 2021 19:32:18 +0000</pubDate>
    </item>
    <item>
      <title>46018ce9-d647-49f9-9f1d-9cf071c61bf5</title>
      <link>https://db.gcve.eu/sighting/46018ce9-d647-49f9-9f1d-9cf071c61bf5/export</link>
      <description>{"uuid": "46018ce9-d647-49f9-9f1d-9cf071c61bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26157", "type": "seen", "source": "https://t.me/cibsecurity/14967", "content": "\u203c CVE-2020-26157 \u203c\n\nLeanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-09-30T22:58:20.000000Z"}</description>
      <content:encoded>{"uuid": "46018ce9-d647-49f9-9f1d-9cf071c61bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26157", "type": "seen", "source": "https://t.me/cibsecurity/14967", "content": "\u203c CVE-2020-26157 \u203c\n\nLeanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-09-30T22:58:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/46018ce9-d647-49f9-9f1d-9cf071c61bf5/export</guid>
      <pubDate>Wed, 30 Sep 2020 22:58:20 +0000</pubDate>
    </item>
  </channel>
</rss>
