{"vulnerability": "CVE-2020-2886", "sightings": [{"uuid": "f8182662-3426-4d30-8757-1506da70da67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28861", "type": "seen", "source": "MISP/4be9e58c-a8cb-4ff2-acc4-d9684559a7e0", "content": "", "creation_timestamp": "2024-11-14T06:07:41.000000Z"}, {"uuid": "dc1987c1-65bb-4007-a239-72585d79f7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28865", "type": "seen", "source": "https://t.me/cibsecurity/44692", "content": "\u203c CVE-2020-28865 \u203c\n\nAn issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T00:23:56.000000Z"}, {"uuid": "7e1ac387-c372-454d-a0b7-40bdf9a55cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28860", "type": "seen", "source": "https://t.me/cibsecurity/20774", "content": "\u203c CVE-2020-28860 \u203c\n\nOpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:37.000000Z"}, {"uuid": "6cf1f997-1eb5-4868-837f-adc04f18a80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28861", "type": "seen", "source": "https://t.me/cibsecurity/20764", "content": "\u203c CVE-2020-28861 \u203c\n\nOpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:20.000000Z"}, {"uuid": "aa24c58a-ba9f-4cb2-b5ba-0c534fecff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28864", "type": "seen", "source": "https://t.me/cibsecurity/16731", "content": "\u203c CVE-2020-28864 \u203c\n\nBuffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-23T22:45:59.000000Z"}]}