CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

273 matches found

Snyk•added 2025/08/22 9:31 p.m.•9 views

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties files uploaded by object entry and stored in documentlibrary, via URL. Remediation Upgrade com.liferay:com.liferay.object.dynamic.data.mapping.form.field.type to version 1.0.65 or...

5.3CVSS5.7AI score0.00322EPSS

SaveExploits0References2

osv_ghsa•added 2025/08/22 9:31 p.m.•24 views

GHSA-MM62-GWJ5-J285 Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

5.3CVSS5.8AI score0.00322EPSS

SaveExploits0References6

Github Security Blog•added 2025/08/22 9:31 p.m.•32 views

Liferay Portal users can upload an unlimited amount of files

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

6.5CVSS5.9AI score0.00389EPSS

SaveExploits0References5Affected Software2

osv_ghsa•added 2025/08/22 9:31 p.m.•33 views

GHSA-84PP-QR92-95C9 Liferay Portal users can upload an unlimited amount of files

5.3CVSS5.9AI score0.00389EPSS

SaveExploits0References5

osv_cve•added 2025/08/22 7:15 p.m.•14 views

CVE-2025-43762

6.5CVSS5.8AI score

SaveExploits0References1

NVD•added 2025/08/22 7:15 p.m.•23 views

CVE-2025-43758

5.3CVSS0.00322EPSS

SaveExploits0References1

NVD•added 2025/08/22 7:15 p.m.•21 views

CVE-2025-43762

6.5CVSS0.00389EPSS

SaveExploits0References1

osv_cve•added 2025/08/22 7:15 p.m.•14 views

CVE-2025-43758

5.3CVSS5.8AI score

SaveExploits0References1

Cvelist•added 2025/08/22 6:43 p.m.•36 views

CVE-2025-43762

5.3CVSS0.00389EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/22 6:43 p.m.•8 views

CVE-2025-43762

5.3CVSS5.9AI score0.00389EPSS

SaveExploits0References1

CVE•added 2025/08/22 6:43 p.m.•46 views

CVE-2025-43762

CVE-2025-43762 affects Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.1 (also 2024 Qx releases), where forms upload allows an unlimited number of files to be stored in document_library, enabling a potential DDoS. Concrete details available: vulnerable components include form upl...

6.5CVSS5.9AI score0.00389EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2025/08/22 6:18 p.m.•28 views

CVE-2025-43758

5.3CVSS0.00322EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/22 6:18 p.m.•6 views

CVE-2025-43758

5.3CVSS5.8AI score0.00322EPSS

SaveExploits0References1

CVE•added 2025/08/22 6:18 p.m.•40 views

CVE-2025-43758

CVE-2025-43758 affects Liferay Portal 7.4.x and Liferay DXP 2025.x/2024.x releases, where unauthenticated (guest) users can access files uploaded via object-entry and stored in the document_library by URL. Affected ranges include: Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.5...

5.3CVSS5.8AI score0.00322EPSS

SaveExploits0References1Affected Software2

RedhatCVE•added 2025/08/22 1:22 p.m.•32 views

CVE-2025-43749

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

5.3CVSS5.8AI score0.00263EPSS

SaveExploits0References1

Snyk•added 2025/08/22 3:30 a.m.•4 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the attachment upload functionality. An attacker can exhaust system resources and disrupt service availability by uploading an unlimited number of files to the documentlibrary...

6.5CVSS5.8AI score0.00331EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/22 3:30 a.m.•26 views

Liferay Portal's Unlimited File Upload Could Result in DoS

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

6.5CVSS5.9AI score0.00331EPSS

SaveExploits0References7Affected Software1

Snyk•added 2025/08/22 3:30 a.m.•13 views

Allocation of Resources Without Limits or Throttling

6.5CVSS5.8AI score0.00331EPSS

SaveExploits0References2

osv_ghsa•added 2025/08/22 3:30 a.m.•28 views

GHSA-QPP6-F3QJ-RGGQ Liferay Portal's Unlimited File Upload Could Result in DoS

5.3CVSS5.9AI score0.00331EPSS

SaveExploits0References7

osv_cve•added 2025/08/22 1:16 a.m.•18 views

CVE-2025-43752

6.5CVSS5.8AI score

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by