CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2471 matches found

Tenable Nessus•added 2025/08/25 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2016-5739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content...

7.5CVSS8AI score0.02948EPSS

SaveExploits0References2

Snyk•added 2025/08/23 3:30 a.m.•6 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the referer and FORWARDURL parameters. An attacker can execute arbitrary JavaScript in the context of a user's browser by injecting malicious payloads using encoded characters and a null-byte %00 in these...

7.2CVSS5.5AI score0.00196EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/23 3:30 a.m.•21 views

Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated...

6.9CVSS5.9AI score0.00196EPSS

SaveExploits0References6Affected Software1

OSV•added 2025/08/23 3:30 a.m.•22 views

GHSA-H4M4-XP33-37MJ Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

6.9CVSS5.2AI score0.00196EPSS

SaveExploits0References6

OSV•added 2025/08/23 2:15 a.m.•12 views

CVE-2025-43770

6.1CVSS5.9AI score

SaveExploits0References1

NVD•added 2025/08/23 2:15 a.m.•16 views

CVE-2025-43770

6.9CVSS0.00196EPSS

SaveExploits0References1

Cvelist•added 2025/08/23 1:03 a.m.•19 views

CVE-2025-43770

6.9CVSS0.00196EPSS

SaveExploits0References1

CVE•added 2025/08/23 1:03 a.m.•38 views

CVE-2025-43770

CVE-2025-43770 is a reflected XSS flaw in Liferay Portal 7.4.0–7.4.3.131 and Liferay DXP 2024.Q1–Q4 releases, where a remote unauthenticated attacker can inject JavaScript via referer or FORWARD_URL by using %00. Affected components include Liferay Portal kernel references; remediation guidance a...

6.9CVSS6AI score0.00196EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/23 1:03 a.m.•3 views

CVE-2025-43770

6.9CVSS6AI score0.00196EPSS

SaveExploits0References1

Mend•added 2025/08/23 1:03 a.m.•2 views

CVE-2025-43770

7.2CVSS0.00196EPSS

SaveExploits0References6

Positive Technologies•added 2025/08/23 12:00 a.m.•17 views

PT-2025-34501 · Liferay · Liferay Portal +2

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.131 Liferay DXP versions 2024.Q1.1 through 2024.Q1.12 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q3.1 through 2024.Q3.13 Liferay DXP versions 2024.Q4.0 through...

6.9CVSS5.3AI score0.00196EPSS

SaveExploits0References11

CNNVD•added 2025/08/23 12:00 a.m.•16 views

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

6.9CVSS6.2AI score0.00196EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2025/08/23 12:00 a.m.•3 views

CVE-2025-43770: Improper Neutralization of Input During Web Page Generation

6.9CVSS5.7AI score0.00196EPSS

SaveExploits0References1

Tenable Nessus•added 2025/08/21 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2017-15393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debuggi...

8.8CVSS8AI score0.0136EPSS

SaveExploits0References2

RedhatCVE•added 2025/08/12 3:25 p.m.•21 views

CVE-2025-8813

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability affects the function changeLanguage of the file src/main/java/co/yiiu/pybbs/controller/front/IndexController.java. The manipulation of the argument referer leads to open redirect. The attac...

6.1CVSS7.2AI score0.00317EPSS

SaveExploits1References1

F5 Networks•added 2025/08/11 8:25 p.m.•25 views

K000152958: Curl vulnerability CVE-2021-22876

Security Advisory Description curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the...

5.3CVSS6.6AI score0.05301EPSS

SaveExploits1

NVD•added 2025/08/10 3:15 p.m.•46 views

CVE-2025-8813

6.1CVSS0.00317EPSS

SaveExploits1References7

Cvelist•added 2025/08/10 2:32 p.m.•54 views

CVE-2025-8813 atjiu pybbs IndexController.java changeLanguage redirect

5.1CVSS0.00317EPSS

SaveExploits1References7

CVE•added 2025/08/10 2:32 p.m.•48 views

CVE-2025-8813

CVE-2025-8813 affects atjiu pybbs up to 6.0.0. The vulnerability resides in the changeLanguage function of src/main/java/co/yiiu/pybbs/controller/front/IndexController.java, where manipulation of the referer argument leads to an open redirect. It can be triggered remotely and the exploit has been...

6.1CVSS4.6AI score0.00317EPSS

SaveExploits1References7Affected Software1

Mend•added 2025/08/10 2:32 p.m.•4 views

CVE-2025-8813

6.1CVSS0.00317EPSS

SaveExploits1References9

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by