{"vulnerability": "CVE-2020-2651", "sightings": [{"uuid": "4ca669cd-5072-4ab4-884a-7a81ad7ca6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26513", "type": "seen", "source": "https://t.me/cibsecurity/17190", "content": "\u203c CVE-2020-26513 \u203c\n\nAn issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to import projects, is parsed by insecurely configured software components, which can be abused for XML External Entity Attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-07T18:30:04.000000Z"}, {"uuid": "e62c70b8-8de7-4e8f-ba3e-670991ce37dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26510", "type": "seen", "source": "https://t.me/cibsecurity/16397", "content": "\u203c CVE-2020-26510 \u203c\n\nAirleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-16T22:37:48.000000Z"}]}