<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 22 Jul 2026 19:48:45 +0000</lastBuildDate>
    <item>
      <title>dcb39233-653c-43c5-a521-6cc20ca04648</title>
      <link>https://db.gcve.eu/sighting/dcb39233-653c-43c5-a521-6cc20ca04648/export</link>
      <description>{"uuid": "dcb39233-653c-43c5-a521-6cc20ca04648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcxkzuilzy2k", "content": "", "creation_timestamp": "2026-01-21T21:03:00.244708Z"}</description>
      <content:encoded>{"uuid": "dcb39233-653c-43c5-a521-6cc20ca04648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcxkzuilzy2k", "content": "", "creation_timestamp": "2026-01-21T21:03:00.244708Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/dcb39233-653c-43c5-a521-6cc20ca04648/export</guid>
      <pubDate>Wed, 21 Jan 2026 21:03:00 +0000</pubDate>
    </item>
    <item>
      <title>bf88d934-4c98-4f11-9647-77b2b14efffb</title>
      <link>https://db.gcve.eu/sighting/bf88d934-4c98-4f11-9647-77b2b14efffb/export</link>
      <description>{"uuid": "bf88d934-4c98-4f11-9647-77b2b14efffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-22881.yaml", "content": "", "creation_timestamp": "2026-01-21T08:13:17.000000Z"}</description>
      <content:encoded>{"uuid": "bf88d934-4c98-4f11-9647-77b2b14efffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-22881.yaml", "content": "", "creation_timestamp": "2026-01-21T08:13:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bf88d934-4c98-4f11-9647-77b2b14efffb/export</guid>
      <pubDate>Wed, 21 Jan 2026 08:13:17 +0000</pubDate>
    </item>
    <item>
      <title>11caa37e-1587-4acc-896d-34c0cdfa124d</title>
      <link>https://db.gcve.eu/sighting/11caa37e-1587-4acc-896d-34c0cdfa124d/export</link>
      <description>{"uuid": "11caa37e-1587-4acc-896d-34c0cdfa124d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22887", "type": "seen", "source": "https://t.me/cibsecurity/24966", "content": "\u203c CVE-2021-22887 \u203c\n\nA vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T19:30:05.000000Z"}</description>
      <content:encoded>{"uuid": "11caa37e-1587-4acc-896d-34c0cdfa124d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22887", "type": "seen", "source": "https://t.me/cibsecurity/24966", "content": "\u203c CVE-2021-22887 \u203c\n\nA vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T19:30:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/11caa37e-1587-4acc-896d-34c0cdfa124d/export</guid>
      <pubDate>Tue, 16 Mar 2021 19:30:05 +0000</pubDate>
    </item>
    <item>
      <title>de5bc257-a534-4c90-876a-d0a7e469f383</title>
      <link>https://db.gcve.eu/sighting/de5bc257-a534-4c90-876a-d0a7e469f383/export</link>
      <description>{"uuid": "de5bc257-a534-4c90-876a-d0a7e469f383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22883", "type": "seen", "source": "https://t.me/cibsecurity/24413", "content": "\u203c CVE-2021-22883 \u203c\n\nNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-03T20:45:53.000000Z"}</description>
      <content:encoded>{"uuid": "de5bc257-a534-4c90-876a-d0a7e469f383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22883", "type": "seen", "source": "https://t.me/cibsecurity/24413", "content": "\u203c CVE-2021-22883 \u203c\n\nNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-03T20:45:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/de5bc257-a534-4c90-876a-d0a7e469f383/export</guid>
      <pubDate>Wed, 03 Mar 2021 20:45:53 +0000</pubDate>
    </item>
    <item>
      <title>8c9f494d-62e7-403c-b812-abc46804dc3b</title>
      <link>https://db.gcve.eu/sighting/8c9f494d-62e7-403c-b812-abc46804dc3b/export</link>
      <description>{"uuid": "8c9f494d-62e7-403c-b812-abc46804dc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22882", "type": "seen", "source": "https://t.me/cibsecurity/24028", "content": "\u203c CVE-2021-22882 \u203c\n\nUniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-23T22:35:19.000000Z"}</description>
      <content:encoded>{"uuid": "8c9f494d-62e7-403c-b812-abc46804dc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22882", "type": "seen", "source": "https://t.me/cibsecurity/24028", "content": "\u203c CVE-2021-22882 \u203c\n\nUniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-23T22:35:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/8c9f494d-62e7-403c-b812-abc46804dc3b/export</guid>
      <pubDate>Tue, 23 Feb 2021 22:35:19 +0000</pubDate>
    </item>
    <item>
      <title>d8ad784a-6d5e-4002-8378-4c3cc8a22dca</title>
      <link>https://db.gcve.eu/sighting/d8ad784a-6d5e-4002-8378-4c3cc8a22dca/export</link>
      <description>{"uuid": "d8ad784a-6d5e-4002-8378-4c3cc8a22dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22880", "type": "seen", "source": "https://t.me/cibsecurity/23458", "content": "\u203c CVE-2021-22880 \u203c\n\nThe PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:50.000000Z"}</description>
      <content:encoded>{"uuid": "d8ad784a-6d5e-4002-8378-4c3cc8a22dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22880", "type": "seen", "source": "https://t.me/cibsecurity/23458", "content": "\u203c CVE-2021-22880 \u203c\n\nThe PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d8ad784a-6d5e-4002-8378-4c3cc8a22dca/export</guid>
      <pubDate>Thu, 11 Feb 2021 20:42:50 +0000</pubDate>
    </item>
    <item>
      <title>d9a38b0f-c81e-42b6-85b9-df2f6bd5ca3b</title>
      <link>https://db.gcve.eu/sighting/d9a38b0f-c81e-42b6-85b9-df2f6bd5ca3b/export</link>
      <description>{"uuid": "d9a38b0f-c81e-42b6-85b9-df2f6bd5ca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "seen", "source": "https://t.me/cibsecurity/23449", "content": "\u203c CVE-2021-22881 \u203c\n\nThe Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:39.000000Z"}</description>
      <content:encoded>{"uuid": "d9a38b0f-c81e-42b6-85b9-df2f6bd5ca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22881", "type": "seen", "source": "https://t.me/cibsecurity/23449", "content": "\u203c CVE-2021-22881 \u203c\n\nThe Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d9a38b0f-c81e-42b6-85b9-df2f6bd5ca3b/export</guid>
      <pubDate>Thu, 11 Feb 2021 20:42:39 +0000</pubDate>
    </item>
  </channel>
</rss>
