CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

29390 matches found

RedhatCVE•added 2025/08/23 5:15 p.m.•17 views

CVE-2025-43755

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92...

5.1CVSS5.4AI score0.00215EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/23 5:15 p.m.•19 views

CVE-2025-43756

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter...

6.9CVSS5.1AI score0.00219EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/22 7:26 p.m.•12 views

CVE-2025-43746

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7....

5.1CVSS5.7AI score0.00217EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/22 7:26 p.m.•14 views

CVE-2025-43757

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7....

4.8CVSS5.1AI score0.00217EPSS

SaveExploits0References1

Github Security Blog•added 2025/08/22 6:31 p.m.•23 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92 allows ...

5.4CVSS5.6AI score0.00264EPSS

SaveExploits0References12Affected Software1

osv_ghsa•added 2025/08/22 6:31 p.m.•25 views

GHSA-FVQV-593Q-QP8R Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

5.3CVSS5.6AI score0.00264EPSS

SaveExploits0References12

NVD•added 2025/08/22 6:15 p.m.•19 views

CVE-2025-43760

5.4CVSS0.00264EPSS

SaveExploits0References1

osv_cve•added 2025/08/22 6:15 p.m.•16 views

CVE-2025-43760

5.4CVSS5.7AI score

SaveExploits0References1

CVE•added 2025/08/22 5:34 p.m.•41 views

CVE-2025-43760

CVE-2025-43760 is a reflected XSS vulnerability in Liferay Portal/DXP (affecting Portal 7.4.0–7.4.3.132 and DXP 2025.Q1.0–2025.Q1.4, plus 2024 Qx and 7.4 GA up to update 92) that allows a remote authenticated attacker to inject JavaScript via the PortalUtil.escapeRedirect. The issue centers on th...

5.4CVSS5.3AI score0.00264EPSS

SaveExploits0References1Affected Software2

osv_ghsa•added 2025/08/22 12:30 a.m.•23 views

GHSA-R367-Q549-PGR5 Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 update 32 through update ...

2.1CVSS5.6AI score0.00212EPSS

SaveExploits0References9

Rapid7 Vulnerability Database (full)•added 2025/08/22 12:00 a.m.•4 views

CVE-2025-43760: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.7AI score0.00264EPSS

SaveExploits0References1

NVD•added 2025/08/21 11:15 p.m.•21 views

CVE-2025-43753

5.4CVSS0.00212EPSS

SaveExploits0References1

osv_cve•added 2025/08/21 11:15 p.m.•15 views

CVE-2025-43753

5.4CVSS5.7AI score

SaveExploits0References1

Cvelist•added 2025/08/21 10:23 p.m.•26 views

CVE-2025-43753

2.1CVSS0.00212EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•24 views

CVE-2025-55103

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

4.8CVSS0.00222EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•22 views

CVE-2025-55107

4.8CVSS0.00222EPSS

SaveExploits0References1

CVE•added 2025/08/21 7:29 p.m.•52 views

CVE-2025-55106

CVE-2025-55106 concerns Esri Portal for ArcGIS Enterprise Sites, affected versions 10.9.1–11.4. A stored cross-site scripting vulnerability exists where an authenticated user can inject a malicious file containing an XSS script; when the file is loaded, it may execute arbitrary JavaScript in the ...

4.8CVSS6.3AI score0.00222EPSS

SaveExploits0References1Affected Software1

Github Security Blog•added 2025/08/21 6:31 p.m.•25 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References6Affected Software1

osv_ghsa•added 2025/08/21 6:31 p.m.•23 views

GHSA-Q2GV-W583-F2VQ Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References6

osv_ghsa•added 2025/08/21 6:31 p.m.•23 views

GHSA-58CQ-8WM2-6M87 Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

5.1CVSS6AI score0.00215EPSS

SaveExploits0References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by