5828 matches found
CVE-2024-25602
Stored cross-site scripting XSS vulnerability in Users Admin module's edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject...
ITFlow Cross Site Request Forgery
CVE: CVE-2024-25344 CWE: CWE-352 Vendor: ITFlow.org Affected product: ITFlow - Before commit 432488eca3998c5be6b6b9e8f8ba01f54bc12378 Discoverer: stehled, WP-Pomoc.cz Attack-Type: Remote AV: Admin user has to open a page, provided by an attacker, which will then perform malicious request changing...
Liferay Portal and Liferay DXP Security Vulnerabilities
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
CVE-2023-21723
Technical details are not publicly available in the provided documents; no affected products, impact, or remediation are specified. Monitor for updates.
CVE-2004-0912
Technical details are not publicly available in the provided documents for CVE-2004-0912. Monitor for updates from Ubuntu security advisories and this CVE entry as more information becomes available.
CVE-2013-3109
The connected OSV entry for UBUNTU-CVE-2013-3109 lists a vulnerability described as “SSL vaildation failed to validate hostnames.” The UB:CVE-2013-3109 Ubuntu entry also shows this description. No concrete affected product/version details, root-cause analysis, impact assessment, exploit status, o...
CVE-2015-4663
Technical details are not publicly available in the provided documents. Monitor for updates from Ubuntu or OSV entries for CVE-2015-4663.
CVE-2018-9782
Technical details for CVE-2018-9782 are not provided in the supplied documents. No exposed information on affected products, impact, or remediation. Monitor for updates as additional details may be published.
CVE-2019-14775
Technical details for CVE-2019-14775 are not publicly available in the provided documents. Monitor for updates.
CVE-2015-2685
The connected records confirm a SQL injection vulnerability in the Icinga Web API (CVE-2015-2685). Affected software: Icinga Web API. Root cause: SQL injection in the Web API. Impact is not detailed in the provided documents beyond identifying an SQL injection issue. Exploitation details are not ...
CVE-2021-0448
Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.
CVE-2022-20003
Technical details are not publicly available in the provided documents for CVE-2022-20003. Connected sources show reports/mentions (Debian/Ubuntu/CNNVD) with no explicit vulnerability specifics. Monitor for updates.
CVE-2023-40321
Technical details for CVE-2023-40321 are not provided in the supplied documents. No confirmed affected products, impact, or fixes are disclosed here. Monitor connected sources (Ubuntu/CVE references) for updates.
CVE-2023-40316
Based on connected documents, CVE-2023-40316 is referenced as an unpatched vulnerability in Linux distributions (notably Ubuntu). The Nessus unpatched plugin notes affected Ubuntu packages with no vendor-supplied patch available, implying an unresolved issue on Linux hosts until a vendor fix is r...
CVE-2023-40318
CVE-2023-40318 is documented in connected Nessus and Ubuntu records as an unpatched vulnerability affecting Linux/Ubuntu packages, with no vendor patch available at the time of assessment. Ubuntu reference shows an entry for CVE-2023-40318; Nessus plugin UNPATCHED_CVE_2023_40318.NASL states Ubunt...
CVE-2023-40324
CVE-2023-40324 is linked to unpatched Linux distributions per Nessus data. The connected UNPATCHED_CVE_2023_40324.NASL plugin indicates one or more packages on Linux/Ubuntu are affected with no vendor-provided patch available, referencing an Ubuntu entry for CVE-2023-40324. The information does n...
CVE-2023-40323
Nessus plugin UNPATCHED_CVE_2023_40323.NASL reports an unpatched vulnerability for CVE-2023-40323 on Ubuntu Linux packages; no vendor patch is available per the plugin. The document does not specify affected Ubuntu package names or versions.
CVE-2014-5515
According to the Ubuntu security entry for CVE-2014-5515, ntopng had several vulnerabilities that were fixed upstream in version 1.2.1. The connected records provide no further details (affected versions, root cause, impact, or exploit information). No MITRE/attack details are included. Remediati...
CVE-2014-5511
NTOPNG is affected by CVE-2014-5511; upstream fixes were released in version 1.2.1. The Ubuntu entry notes several vulnerabilities fixed in 1.2.1, suggesting prior versions prior to 1.2.1 contained exploitable issues. The Debian/Ubuntu pages confirm the CVE exists and reference the 1.2.1 fix with...
