<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 05 Jun 2026 21:42:27 +0000</lastBuildDate>
    <item>
      <title>c2dbca2b-3e42-4157-b95b-a0d0884ef39c</title>
      <link>https://db.gcve.eu/sighting/c2dbca2b-3e42-4157-b95b-a0d0884ef39c/export</link>
      <description>{"uuid": "c2dbca2b-3e42-4157-b95b-a0d0884ef39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2093", "type": "seen", "source": "https://t.me/cibsecurity/45909", "content": "\u203c CVE-2022-2093 \u203c\n\nThe WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-11T16:19:12.000000Z"}</description>
      <content:encoded>{"uuid": "c2dbca2b-3e42-4157-b95b-a0d0884ef39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2093", "type": "seen", "source": "https://t.me/cibsecurity/45909", "content": "\u203c CVE-2022-2093 \u203c\n\nThe WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-11T16:19:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/c2dbca2b-3e42-4157-b95b-a0d0884ef39c/export</guid>
      <pubDate>Mon, 11 Jul 2022 16:19:12 +0000</pubDate>
    </item>
    <item>
      <title>b3b38df3-594f-4f88-a6f9-d266d18525be</title>
      <link>https://db.gcve.eu/sighting/b3b38df3-594f-4f88-a6f9-d266d18525be/export</link>
      <description>{"uuid": "b3b38df3-594f-4f88-a6f9-d266d18525be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20930", "type": "seen", "source": "https://t.me/cibsecurity/50807", "content": "\u203c CVE-2022-20930 \u203c\n\nA vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands that are executed as the root user account. A successful exploit could allow the attacker to overwrite arbitrary system files, which could result in a denial of service (DoS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:39.000000Z"}</description>
      <content:encoded>{"uuid": "b3b38df3-594f-4f88-a6f9-d266d18525be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20930", "type": "seen", "source": "https://t.me/cibsecurity/50807", "content": "\u203c CVE-2022-20930 \u203c\n\nA vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands that are executed as the root user account. A successful exploit could allow the attacker to overwrite arbitrary system files, which could result in a denial of service (DoS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b3b38df3-594f-4f88-a6f9-d266d18525be/export</guid>
      <pubDate>Fri, 30 Sep 2022 22:36:39 +0000</pubDate>
    </item>
    <item>
      <title>5f388497-b547-42f3-8e79-e0016a97660e</title>
      <link>https://db.gcve.eu/sighting/5f388497-b547-42f3-8e79-e0016a97660e/export</link>
      <description>{"uuid": "5f388497-b547-42f3-8e79-e0016a97660e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20933", "type": "seen", "source": "https://t.me/cibsecurity/52108", "content": "\u203c CVE-2022-20933 \u203c\n\nA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit this vulnerability by crafting a malicious request and sending it to the affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to crash and restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and re-authenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention. Cisco Meraki has released software updates that address this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-26T18:27:30.000000Z"}</description>
      <content:encoded>{"uuid": "5f388497-b547-42f3-8e79-e0016a97660e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20933", "type": "seen", "source": "https://t.me/cibsecurity/52108", "content": "\u203c CVE-2022-20933 \u203c\n\nA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit this vulnerability by crafting a malicious request and sending it to the affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to crash and restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and re-authenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention. Cisco Meraki has released software updates that address this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-26T18:27:30.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5f388497-b547-42f3-8e79-e0016a97660e/export</guid>
      <pubDate>Wed, 26 Oct 2022 18:27:30 +0000</pubDate>
    </item>
    <item>
      <title>c0e4e06e-fec5-48e8-86a8-88de60bac7a7</title>
      <link>https://db.gcve.eu/sighting/c0e4e06e-fec5-48e8-86a8-88de60bac7a7/export</link>
      <description>{"uuid": "c0e4e06e-fec5-48e8-86a8-88de60bac7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487833443786916", "content": "", "creation_timestamp": "2024-11-15T16:08:32.272253Z"}</description>
      <content:encoded>{"uuid": "c0e4e06e-fec5-48e8-86a8-88de60bac7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487833443786916", "content": "", "creation_timestamp": "2024-11-15T16:08:32.272253Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/c0e4e06e-fec5-48e8-86a8-88de60bac7a7/export</guid>
      <pubDate>Fri, 15 Nov 2024 16:08:32 +0000</pubDate>
    </item>
    <item>
      <title>8ceac749-7181-4851-acd7-13792b217685</title>
      <link>https://db.gcve.eu/sighting/8ceac749-7181-4851-acd7-13792b217685/export</link>
      <description>{"uuid": "8ceac749-7181-4851-acd7-13792b217685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20933", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llrrgnf2sb2e", "content": "", "creation_timestamp": "2025-04-01T21:02:03.861369Z"}</description>
      <content:encoded>{"uuid": "8ceac749-7181-4851-acd7-13792b217685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-20933", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llrrgnf2sb2e", "content": "", "creation_timestamp": "2025-04-01T21:02:03.861369Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/8ceac749-7181-4851-acd7-13792b217685/export</guid>
      <pubDate>Tue, 01 Apr 2025 21:02:03 +0000</pubDate>
    </item>
  </channel>
</rss>
