https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 21:34:34 +0000 https://db.gcve.eu/sighting/ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d/export {"uuid": "ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28851", "type": "seen", "source": "https://t.me/cibsecurity/21511", "content": "\u203c CVE-2020-28851 \u203c\n\nIn x/text in Go 1.15.4, an \"index out of range\" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:56.000000Z"} {"uuid": "ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28851", "type": "seen", "source": "https://t.me/cibsecurity/21511", "content": "\u203c CVE-2020-28851 \u203c\n\nIn x/text in Go 1.15.4, an \"index out of range\" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:56.000000Z"} https://db.gcve.eu/sighting/ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d/export Sat, 02 Jan 2021 12:33:56 +0000 https://db.gcve.eu/sighting/6fa9c935-0412-42c7-a424-fe7f12780d24/export {"uuid": "6fa9c935-0412-42c7-a424-fe7f12780d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28852", "type": "seen", "source": "https://t.me/cibsecurity/21510", "content": "\u203c CVE-2020-28852 \u203c\n\nIn x/text in Go 1.15.4, a \"slice bounds out of range\" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:55.000000Z"} {"uuid": "6fa9c935-0412-42c7-a424-fe7f12780d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28852", "type": "seen", "source": "https://t.me/cibsecurity/21510", "content": "\u203c CVE-2020-28852 \u203c\n\nIn x/text in Go 1.15.4, a \"slice bounds out of range\" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:55.000000Z"} https://db.gcve.eu/sighting/6fa9c935-0412-42c7-a424-fe7f12780d24/export Sat, 02 Jan 2021 12:33:55 +0000 https://db.gcve.eu/sighting/3b8bb0a4-8531-459f-a88a-ffffaed7a318/export {"uuid": "3b8bb0a4-8531-459f-a88a-ffffaed7a318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28859", "type": "seen", "source": "https://t.me/cibsecurity/20775", "content": "\u203c CVE-2020-28859 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:38.000000Z"} {"uuid": "3b8bb0a4-8531-459f-a88a-ffffaed7a318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28859", "type": "seen", "source": "https://t.me/cibsecurity/20775", "content": "\u203c CVE-2020-28859 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:38.000000Z"} https://db.gcve.eu/sighting/3b8bb0a4-8531-459f-a88a-ffffaed7a318/export Mon, 14 Dec 2020 22:39:38 +0000 https://db.gcve.eu/sighting/188944ab-2611-4289-9fd4-815f69c84eec/export {"uuid": "188944ab-2611-4289-9fd4-815f69c84eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28858", "type": "seen", "source": "https://t.me/cibsecurity/20773", "content": "\u203c CVE-2020-28858 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:36.000000Z"} {"uuid": "188944ab-2611-4289-9fd4-815f69c84eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28858", "type": "seen", "source": "https://t.me/cibsecurity/20773", "content": "\u203c CVE-2020-28858 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:36.000000Z"} https://db.gcve.eu/sighting/188944ab-2611-4289-9fd4-815f69c84eec/export Mon, 14 Dec 2020 22:39:36 +0000 https://db.gcve.eu/sighting/18a2b4c6-c1f2-4af1-8fd7-a106c3624c05/export {"uuid": "18a2b4c6-c1f2-4af1-8fd7-a106c3624c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28857", "type": "seen", "source": "https://t.me/cibsecurity/20765", "content": "\u203c CVE-2020-28857 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:21.000000Z"} {"uuid": "18a2b4c6-c1f2-4af1-8fd7-a106c3624c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28857", "type": "seen", "source": "https://t.me/cibsecurity/20765", "content": "\u203c CVE-2020-28857 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:21.000000Z"} https://db.gcve.eu/sighting/18a2b4c6-c1f2-4af1-8fd7-a106c3624c05/export Mon, 14 Dec 2020 22:39:21 +0000 https://db.gcve.eu/sighting/d3c9c784-a35d-46fd-9e6a-5c3c82cde439/export {"uuid": "d3c9c784-a35d-46fd-9e6a-5c3c82cde439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28856", "type": "seen", "source": "https://t.me/cibsecurity/20752", "content": "\u203c CVE-2020-28856 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T20:39:52.000000Z"} {"uuid": "d3c9c784-a35d-46fd-9e6a-5c3c82cde439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28856", "type": "seen", "source": "https://t.me/cibsecurity/20752", "content": "\u203c CVE-2020-28856 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T20:39:52.000000Z"} https://db.gcve.eu/sighting/d3c9c784-a35d-46fd-9e6a-5c3c82cde439/export Mon, 14 Dec 2020 20:39:52 +0000