CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

20 matches found

EUVD•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-24463

Malicious code in bioql PyPI...

5.1CVSS6.4AI score0.00219EPSS

SaveExploits0References4

RedhatCVE•added 2025/08/14 7:30 p.m.•13 views

CVE-2025-43734

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows...

5.1CVSS5.7AI score0.00219EPSS

SaveExploits0References1

Snyk•added 2025/08/12 9:31 p.m.•12 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the first display label field in the configuration of a custom sort widget. An attacker can execute arbitrary JavaScript code in the context of the user's browser by injecting a malicious payload that is...

5.4CVSS5.4AI score0.00219EPSS

SaveExploits0References2

OSV•added 2025/08/12 9:31 p.m.•24 views

GHSA-M5C7-5GV3-HCPF Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability

5.1CVSS5.6AI score0.00219EPSS

SaveExploits0References5

Github Security Blog•added 2025/08/12 9:31 p.m.•23 views

Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability

5.4CVSS5.6AI score0.00219EPSS

SaveExploits0References5Affected Software3

NVD•added 2025/08/12 7:15 p.m.•13 views

CVE-2025-43734

5.4CVSS0.00219EPSS

SaveExploits0References1

OSV•added 2025/08/12 7:15 p.m.•17 views

CVE-2025-43734

5.4CVSS5.8AI score

SaveExploits0References1

Cvelist•added 2025/08/12 6:51 p.m.•23 views

CVE-2025-43734

5.1CVSS0.00219EPSS

SaveExploits0References1

CVE•added 2025/08/12 6:51 p.m.•37 views

CVE-2025-43734

Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.10, 2024.Q4.0–2024.Q4.7, 2024.Q3.1–2024.Q3.13, 2024.Q2.1–2024.Q2.13, 2024.Q1.1–2024.Q1.16 and 7.4 GA through update 92 are affected by a reflected XSS in the first display label field of a custom sort widget. A remote authenticated ...

5.4CVSS5.7AI score0.00219EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/12 6:51 p.m.•5 views

CVE-2025-43734

5.1CVSS5.7AI score0.00219EPSS

SaveExploits0References1

Positive Technologies•added 2025/08/12 12:00 a.m.•13 views

PT-2025-32880 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.10 Liferay DXP versions 2024.Q4.0 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through 2024.Q3.13 Liferay DXP versions 2024.Q2.1 through...

5.1CVSS5.3AI score0.00219EPSS

SaveExploits0References8

Rapid7 Vulnerability Database (full)•added 2025/08/12 12:00 a.m.•3 views

CVE-2025-43734: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.8AI score0.00219EPSS

SaveExploits0References1

Github Security Blog•added 2022/10/19 12:00 p.m.•18 views

Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module

A Cross-site scripting XSS vulnerability in the Portal Search module's Sort widget before 6.0.45 from Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix pack 19, 7.3 before update 5, and DXP 7.4 before update 25 allows remote attackers to inject arbitrary web script or HTML via...

5.4CVSS6AI score0.00533EPSS

SaveExploits0References7Affected Software2

NVD•added 2022/10/18 9:15 p.m.•29 views

CVE-2022-42112

A Cross-site scripting XSS vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix pack 19, 7.3 before update 5, and DXP 7.4 before update 25 allows remote attackers to inject arbitrary web script or HTML via a crafted paylo...

5.4CVSS0.00533EPSS

SaveExploits0References1

Prion•added 2022/10/18 9:15 p.m.•36 views

Cross site scripting

4.9CVSS5.3AI score0.00533EPSS

SaveExploits0References2Affected Software2

OSV•added 2022/10/18 12:00 a.m.•30 views

CVE-2022-42112

5.4CVSS5.8AI score

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2022/10/18 12:00 a.m.•2 views

CVE-2022-42112: Improper Neutralization of Input During Web Page Generation

5.4CVSS6AI score0.00533EPSS

SaveExploits0References4

Mend•added 2022/10/18 12:00 a.m.•2 views

CVE-2022-42112

5.4CVSS0.00533EPSS

SaveExploits0References9

CNNVD•added 2022/10/18 12:00 a.m.•17 views

Liferay Portal 跨站脚本漏洞

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. A security vulnerability exists in Liferay Portal versions...

5.4CVSS5.5AI score0.00533EPSS

SaveExploits0References3

zdt•added 2015/07/18 12:00 a.m.•87 views

Oracle Application Express Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications title: Permanent Cross-Site Scripting product: Oracle Application Express vulnerable version: All versions prior to 4.2.3.00.08 fixed version: 4.2.3.00.08 CVE number: CVE-2015-2655 impact: high homepage: https://apex.oracle.com/i/index.ht...

5.5CVSS6.6AI score0.01716EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by