{"vulnerability": "cve-2020-2840", "sightings": [{"uuid": "6c943d7d-cd09-46ec-940f-a773be25dddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28407", "type": "seen", "source": "https://t.me/cibsecurity/73492", "content": "\u203c CVE-2020-28407 \u203c\n\nIn swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T06:23:02.000000Z"}, {"uuid": "0f1a29fd-c5eb-45f2-ae7b-70f7c7d2c56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28407", "type": "seen", "source": "https://t.me/arpsyndicate/2844", "content": "#ExploitObserverAlert\n\nCVE-2020-28407\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2020-28407. In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.2\nNVD-ES: 1.8", "creation_timestamp": "2024-01-16T11:13:10.000000Z"}, {"uuid": "12e4a9c0-1a72-4898-b5dc-b63e0ea241df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28408", "type": "seen", "source": "https://t.me/cibsecurity/16134", "content": "\u203c CVE-2020-28408 \u203c\n\nThe server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-11T00:27:24.000000Z"}, {"uuid": "edaea17a-195b-4daf-b966-0e9f785ae108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28409", "type": "seen", "source": "https://t.me/cibsecurity/16135", "content": "\u203c CVE-2020-28409 \u203c\n\nThe server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-11T00:27:25.000000Z"}]}