CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

449 matches found

RedhatCVE•added 2025/08/23 5:15 p.m.•11 views

CVE-2025-43756

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter...

6.9CVSS5.1AI score0.00214EPSS

SaveExploits0References1

OSV•added 2025/08/22 12:30 a.m.•7 views

GHSA-R367-Q549-PGR5 Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 update 32 through update ...

2.1CVSS5.6AI score0.00203EPSS

SaveExploits0References9

NVD•added 2025/08/21 11:15 p.m.•6 views

CVE-2025-43753

5.4CVSS0.00203EPSS

SaveExploits0References1

OSV•added 2025/08/21 11:15 p.m.•6 views

CVE-2025-43753

5.4CVSS5.7AI score0.00203EPSS

SaveExploits0References1

Github Security Blog•added 2025/08/21 6:31 p.m.•11 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References6Affected Software1

OSV•added 2025/08/21 6:31 p.m.•7 views

GHSA-Q2GV-W583-F2VQ Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References6

NVD•added 2025/08/21 5:15 p.m.•7 views

CVE-2025-43756

6.9CVSS0.00214EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/21 4:34 p.m.•11 views

CVE-2025-43738

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19...

5.1CVSS5.7AI score0.00212EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/21 4:19 p.m.•2 views

CVE-2025-43756

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References1

CVE•added 2025/08/21 4:19 p.m.•21 views

CVE-2025-43756

A reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.132 and Liferay DXP versions 2025.Q1.0–2025.Q1.15, 2025.Q2.0–2025.Q2.2, and 2024.Q1.13–2024.Q1.19. The issue allows a remote authenticated user to inject JavaScript code through the snippet parameter. Impact is described...

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References1Affected Software2

Positive Technologies•added 2025/08/21 12:0 a.m.•10 views

PT-2025-34240 · Liferay · Liferay Dxp 2024.Q1.19 +6

Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.15 Liferay DXP versions 2025.Q2.0 through 2025.Q2.2 Liferay DXP versions 2024.Q1.13 through 2024.Q1.19 Description: A reflected cross-site scripting XSS...

6.9CVSS5.1AI score0.00214EPSS

SaveExploits0References8

RedhatCVE•added 2025/08/20 6:32 p.m.•16 views

CVE-2025-43731

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows ...

6.9CVSS5.1AI score0.00214EPSS

SaveExploits0References1

NVD•added 2025/08/19 7:15 p.m.•5 views

CVE-2025-43737

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 through 2025.Q1.15 allows a remote authenticated user to inject JavaScript code via comliferayjournalwebportletJournalPortletbackURL parameter...

5.4CVSS0.00279EPSS

SaveExploits0References1

OSV•added 2025/08/19 6:31 p.m.•10 views

GHSA-CWGH-R52J-XH6C Liferay Portal Reflected Cross-Site Scripting Vulnerability in displayType Parameter

5.1CVSS5.6AI score0.00212EPSS

SaveExploits0References5

CVE•added 2025/08/19 6:13 p.m.•21 views

CVE-2025-43737

CVE-2025-43737 is a reflected XSS vulnerability in Liferay Portal 7.4.3.132 and Liferay DXP releases 2025.Q2.0–2025.Q2.8 and 2025.Q1.0–2025.Q1.15. The issue allows a remote authenticated user to inject JavaScript by manipulating the parameter _com_liferay_journal_web_portlet_JournalPortlet_backUR...

5.4CVSS5.7AI score0.00279EPSS

SaveExploits0References1Affected Software2

OSV•added 2025/08/19 4:15 p.m.•4 views

CVE-2025-43738

5.4CVSS5.8AI score0.00212EPSS

SaveExploits0References1

CVE•added 2025/08/19 3:50 p.m.•23 views

CVE-2025-43738

CVE-2025-43738 : A reflected XSS in Liferay Portal/DXP allows a remote authenticated user to inject JavaScript via the _com_liferay_expando_web_portlet_ExpandoPortlet_displayType parameter. Affected: Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q2.0–Q2.8, 2025.Q1.0–Q1.15, 2024.Q4.0–Q4.7, 2...

5.4CVSS5.7AI score0.00212EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/19 3:50 p.m.•5 views

CVE-2025-43738

5.1CVSS5.7AI score0.00212EPSS

SaveExploits0References1

NVD•added 2025/08/18 7:15 p.m.•7 views

CVE-2025-43731

6.9CVSS0.00214EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/18 6:20 p.m.•3 views

CVE-2025-43731

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by