<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 07 Jun 2026 04:30:39 +0000</lastBuildDate>
    <item>
      <title>4c604f59-0553-4fa4-aea1-78a84bbb766f</title>
      <link>https://db.gcve.eu/sighting/4c604f59-0553-4fa4-aea1-78a84bbb766f/export</link>
      <description>{"uuid": "4c604f59-0553-4fa4-aea1-78a84bbb766f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/cibsecurity/50257", "content": "\u203c CVE-2022-39975 \u203c\n\nThe Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:52.000000Z"}</description>
      <content:encoded>{"uuid": "4c604f59-0553-4fa4-aea1-78a84bbb766f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/cibsecurity/50257", "content": "\u203c CVE-2022-39975 \u203c\n\nThe Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4c604f59-0553-4fa4-aea1-78a84bbb766f/export</guid>
      <pubDate>Thu, 22 Sep 2022 07:11:52 +0000</pubDate>
    </item>
    <item>
      <title>e7454444-8808-4cfc-9ca3-df23662fee02</title>
      <link>https://db.gcve.eu/sighting/e7454444-8808-4cfc-9ca3-df23662fee02/export</link>
      <description>{"uuid": "e7454444-8808-4cfc-9ca3-df23662fee02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/arpsyndicate/3244", "content": "#ExploitObserverAlert\n\nCVE-2022-39975\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2022-39975. The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-28T07:09:09.000000Z"}</description>
      <content:encoded>{"uuid": "e7454444-8808-4cfc-9ca3-df23662fee02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/arpsyndicate/3244", "content": "#ExploitObserverAlert\n\nCVE-2022-39975\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2022-39975. The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-28T07:09:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/e7454444-8808-4cfc-9ca3-df23662fee02/export</guid>
      <pubDate>Sun, 28 Jan 2024 07:09:09 +0000</pubDate>
    </item>
  </channel>
</rss>
