Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27270

Malicious code in bioql PyPI...

4.8CVSS6.3AI score0.00044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/11 1:22 a.m.5 views

CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

4.8CVSS5.7AI score0.00044EPSS
Exploits0References1
OSV
OSV
added 2025/09/09 3:30 a.m.2 views

GHSA-CPG4-QCJ8-42GP Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

4.8CVSS5.8AI score0.00044EPSS
Exploits0References4
NVD
NVD
added 2025/09/09 2:15 a.m.2 views

CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

6.1CVSS0.00044EPSS
Exploits0References1
OSV
OSV
added 2025/09/09 2:15 a.m.0 views

CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

6.1CVSS5.8AI score0.00044EPSS
Exploits0References1
CVE
CVE
added 2025/09/09 1:21 a.m.10 views

CVE-2025-43778

The CVE-2025-43778 issue is a Stored XSS in Liferay Portal and Liferay DXP, exploitable via the name of a fieldset in Kaleo Forms Admin. Affected products/versions include Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP across multiple 2024–2025 quarterly releases (e.g., 2025.Q1.0–Q1.16, 2025.Q2.0...

6.1CVSS5.3AI score0.00044EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/09/09 1:21 a.m.2 views

CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

4.8CVSS5.3AI score0.00044EPSS
Exploits0References1
Rows per page
Query Builder