CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

235 matches found

NVD•added 2025/08/22 7:15 p.m.•8 views

CVE-2025-43758

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

5.3CVSS0.00322EPSS

SaveExploits0References1

NVD•added 2025/08/22 7:15 p.m.•9 views

CVE-2025-43762

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

6.5CVSS0.0038EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/22 6:43 p.m.•4 views

CVE-2025-43762

5.3CVSS6.3AI score0.0038EPSS

SaveExploits0References1

Cvelist•added 2025/08/22 6:43 p.m.•16 views

CVE-2025-43762

5.3CVSS0.0038EPSS

SaveExploits0References1

CVE•added 2025/08/22 6:43 p.m.•21 views

CVE-2025-43762

CVE-2025-43762 affects Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.1 (also 2024 Qx releases), where forms upload allows an unlimited number of files to be stored in document_library, enabling a potential DDoS. Concrete details available: vulnerable components include form upl...

6.5CVSS6.8AI score0.0038EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2025/08/22 6:18 p.m.•14 views

CVE-2025-43758

5.3CVSS0.00322EPSS

SaveExploits0References1

CVE•added 2025/08/22 6:18 p.m.•23 views

CVE-2025-43758

CVE-2025-43758 affects Liferay Portal 7.4.x and Liferay DXP 2025.x/2024.x releases, where unauthenticated (guest) users can access files uploaded via object-entry and stored in the document_library by URL. Affected ranges include: Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.5...

5.3CVSS7AI score0.00322EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/22 6:18 p.m.•3 views

CVE-2025-43758

5.3CVSS6.5AI score0.00322EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/22 1:22 p.m.•15 views

CVE-2025-43749

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

5.3CVSS6.2AI score0.00263EPSS

SaveExploits0References1

Snyk•added 2025/08/22 3:30 a.m.•3 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the attachment upload functionality. An attacker can exhaust system resources and disrupt service availability by uploading an unlimited number of files to the documentlibrary...

6.5CVSS7.1AI score0.00309EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/22 3:30 a.m.•11 views

Liferay Portal's Unlimited File Upload Could Result in DoS

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

6.5CVSS6.8AI score0.00309EPSS

SaveExploits0References7Affected Software1

Snyk•added 2025/08/22 3:30 a.m.•5 views

Allocation of Resources Without Limits or Throttling

6.5CVSS7.1AI score0.00309EPSS

SaveExploits0References2

OSV•added 2025/08/22 3:30 a.m.•10 views

GHSA-QPP6-F3QJ-RGGQ Liferay Portal's Unlimited File Upload Could Result in DoS

5.3CVSS6.8AI score0.00309EPSS

SaveExploits0References7

OSV•added 2025/08/22 1:16 a.m.•6 views

CVE-2025-43752

6.5CVSS5.8AI score

SaveExploits0References1

NVD•added 2025/08/22 1:16 a.m.•9 views

CVE-2025-43752

6.5CVSS0.00309EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/22 12:0 a.m.•2 views

CVE-2025-43752

5.3CVSS6.8AI score0.00309EPSS

SaveExploits0References1

CVE•added 2025/08/22 12:0 a.m.•27 views

CVE-2025-43752

Summary: CVE-2025-43752 affects Liferay Portal 7.4.x (including 7.4 GA up to update 92) and Liferay DXP 2025.Q1.x (and 2024 Q1–Q4 releases), where an unrestricted file upload via object entries attachment fields allows unlimited files to be stored in document_library, enabling potential DoS via r...

6.5CVSS6.8AI score0.00309EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2025/08/22 12:0 a.m.•15 views

CVE-2025-43752

5.3CVSS0.00309EPSS

SaveExploits0References1

Positive Technologies•added 2025/08/22 12:0 a.m.•12 views

PT-2025-34479 · Liferay · Liferay Portal +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.1 Liferay DXP versions 2024.Q4.0 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through 2024.Q3.13 Liferay DXP versions 2024.Q2.0 through...

5.3CVSS6.1AI score0.0038EPSS

SaveExploits0References9

Positive Technologies•added 2025/08/22 12:0 a.m.•10 views

PT-2025-34478

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.5 Liferay DXP versions 2024.Q4.0 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through 2024.Q3.13 Liferay DXP versions 2024.Q2.0 through...

5.3CVSS6.4AI score0.00322EPSS

SaveExploits0References12

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by