CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

692 matches found

Veracode•added 2025/09/09 4:26 p.m.•7 views

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization due to the message boards feature allowing remote authenticated attackers to inject malicious JavaScript via the web interface...

5.4CVSS6.6AI score0.00215EPSS

SaveExploits0References7Affected Software3

Veracode•added 2025/09/08 5:43 a.m.•8 views

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation due to message board threads and categories allowing remote authenticated users to inject malicious JavaScript...

6.9CVSS6.4AI score0.00214EPSS

SaveExploits0References8Affected Software3

Tenable Nessus•added 2025/08/30 12:0 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2023-3904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting fr...

7.5CVSS7.3AI score0.00753EPSS

SaveExploits0References2

RedhatCVE•added 2025/08/21 1:25 p.m.•6 views

CVE-2025-43740

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.9 through 2024.Q1.19 allows...

4.6CVSS6AI score0.00215EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/20 6:32 p.m.•16 views

CVE-2025-43731

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows ...

6.9CVSS5.1AI score0.00214EPSS

SaveExploits0References1

Snyk•added 2025/08/19 3:31 p.m.•7 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the message boards feature available through the web interface. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious scripts into messages. Details Cross-sit...

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Snyk•added 2025/08/19 3:31 p.m.•1 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Snyk•added 2025/08/19 3:31 p.m.•3 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Snyk•added 2025/08/19 3:31 p.m.•4 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/19 3:31 p.m.•11 views

Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

5.4CVSS5.9AI score0.00215EPSS

SaveExploits0References7Affected Software1

OSV•added 2025/08/19 3:31 p.m.•7 views

GHSA-22JP-W3CG-GVMM Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

4.6CVSS5.9AI score0.00215EPSS

SaveExploits0References7

NVD•added 2025/08/19 1:15 p.m.•6 views

CVE-2025-43740

5.4CVSS0.00215EPSS

SaveExploits0References1

OSV•added 2025/08/19 1:15 p.m.•6 views

CVE-2025-43740

5.4CVSS5.7AI score0.00215EPSS

SaveExploits0References1

Cvelist•added 2025/08/19 1:3 p.m.•10 views

CVE-2025-43740

4.6CVSS0.00215EPSS

SaveExploits0References1

CVE•added 2025/08/19 1:3 p.m.•16 views

CVE-2025-43740

CVE-2025-43740 is a stored XSS vulnerability in Liferay Portal and Liferay DXP. Affected: Liferay Portal 7.4.3.120–7.4.3.132 and Liferay DXP 2025.Q1.0–Q2.8 (also Q4/Q3/Q2/Q1 2024). The issue allows a remote authenticated attacker to inject JavaScript via the web interface’s message boards feature...

5.4CVSS5.5AI score0.00215EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/19 1:3 p.m.•5 views

CVE-2025-43740

4.6CVSS6AI score0.00215EPSS

SaveExploits0References1

Positive Technologies•added 2025/08/19 12:0 a.m.•7 views

PT-2025-33726 · Liferay · Liferay Portal +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.120 through 7.4.3.132 Liferay DXP versions 2025.Q2.0 through 2025.Q2.8 Liferay DXP versions 2025.Q1.0 through 2025.Q1.15 Liferay DXP versions 2024.Q4.0 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through...

4.6CVSS6.1AI score0.00215EPSS

SaveExploits0References10

Snyk•added 2025/08/18 9:31 p.m.•2 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in message board threads and categories. An attacker can execute arbitrary JavaScript code in the context of another user by injecting malicious scripts into these fields. Details Cross-site scripting or XSS is ...

6.9CVSS5.4AI score0.00214EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/18 9:31 p.m.•9 views

Liferay Portal Vulnerable to Cross-Site Scripting

6.9CVSS5.6AI score0.00214EPSS

SaveExploits0References8Affected Software1

OSV•added 2025/08/18 9:31 p.m.•7 views

GHSA-3P2M-574V-V257 Liferay Portal Vulnerable to Cross-Site Scripting

6.9CVSS5.6AI score0.00214EPSS

SaveExploits0References8

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by