CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

18920 matches found

Tenable Nessus•added 2025/08/24 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2014-8326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticat...

3.5CVSS8.7AI score0.01533EPSS

SaveExploits1References2

RedhatCVE•added 2025/08/23 8:13 p.m.•10 views

CVE-2025-55103

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

4.8CVSS6.9AI score0.00222EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/23 5:15 p.m.•10 views

CVE-2025-43755

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92...

5.1CVSS5.4AI score0.00215EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/23 5:15 p.m.•13 views

CVE-2025-43756

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter...

6.9CVSS5.1AI score0.00214EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/22 7:26 p.m.•7 views

CVE-2025-43757

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7....

4.8CVSS5.1AI score0.00217EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/22 7:26 p.m.•9 views

CVE-2025-43746

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7....

5.1CVSS5.7AI score0.00217EPSS

SaveExploits0References1

OSV•added 2025/08/22 6:31 p.m.•8 views

GHSA-FVQV-593Q-QP8R Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92 allows ...

5.3CVSS5.6AI score0.00258EPSS

SaveExploits0References12

Github Security Blog•added 2025/08/22 6:31 p.m.•14 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

5.4CVSS5.6AI score0.00258EPSS

SaveExploits0References12Affected Software1

NVD•added 2025/08/22 6:15 p.m.•8 views

CVE-2025-43760

5.4CVSS0.00258EPSS

SaveExploits0References1

OSV•added 2025/08/22 6:15 p.m.•10 views

CVE-2025-43760

5.4CVSS5.7AI score

SaveExploits0References1

CVE•added 2025/08/22 5:34 p.m.•25 views

CVE-2025-43760

CVE-2025-43760 is a reflected XSS vulnerability in Liferay Portal/DXP (affecting Portal 7.4.0–7.4.3.132 and DXP 2025.Q1.0–2025.Q1.4, plus 2024 Qx and 7.4 GA up to update 92) that allows a remote authenticated attacker to inject JavaScript via the PortalUtil.escapeRedirect. The issue centers on th...

5.4CVSS5.3AI score0.00258EPSS

SaveExploits0References1Affected Software2

OSV•added 2025/08/22 12:30 a.m.•11 views

GHSA-R367-Q549-PGR5 Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 update 32 through update ...

2.1CVSS5.6AI score0.00203EPSS

SaveExploits0References9

OSV•added 2025/08/21 11:15 p.m.•7 views

CVE-2025-43753

5.4CVSS5.7AI score

SaveExploits0References1

NVD•added 2025/08/21 11:15 p.m.•11 views

CVE-2025-43753

5.4CVSS0.00203EPSS

SaveExploits0References1

Cvelist•added 2025/08/21 10:23 p.m.•15 views

CVE-2025-43753

2.1CVSS0.00203EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•14 views

CVE-2025-55103

4.8CVSS0.00222EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•12 views

CVE-2025-55107

4.8CVSS0.00222EPSS

SaveExploits0References1

CVE•added 2025/08/21 7:29 p.m.•31 views

CVE-2025-55106

CVE-2025-55106 concerns Esri Portal for ArcGIS Enterprise Sites, affected versions 10.9.1–11.4. A stored cross-site scripting vulnerability exists where an authenticated user can inject a malicious file containing an XSS script; when the file is loaded, it may execute arbitrary JavaScript in the ...

4.8CVSS6.3AI score0.00222EPSS

SaveExploits0References1Affected Software1

OSV•added 2025/08/21 6:31 p.m.•11 views

GHSA-58CQ-8WM2-6M87 Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

5.1CVSS6AI score0.00215EPSS

SaveExploits0References6

OSV•added 2025/08/21 6:31 p.m.•10 views

GHSA-Q2GV-W583-F2VQ Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00214EPSS

SaveExploits0References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by