1913 matches found
Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...
CVE-2024-26266
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...
Cross site scripting
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...
CVE-2024-26266
CVE-2024-26266 corresponds to multiple stored XSS vulnerabilities in Liferay Portal and Liferay DXP. Affected products/versions include Liferay Portal 7.2.0 through 7.4.3.13, and DXP releases prior to certain fixes, where remote authenticated users can inject arbitrary script/HTML via crafted pay...
CVE-2024-26266
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...
ThreatDown EDR update: Streamlined Suspicious Activity investigation
Navigating the complex world of alerts just got easier, thanks to our latest enhancements to the ThreatDown Endpoint Detection and Response EDR platform. The detailed technical information in EDR alerts—replete with complicated diagrams and references to advanced cybersecurity tactics—can overwhe...
PT-2024-21319 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.13 Liferay DXP 7.4 before update 10 Liferay DXP 7.3 before update 4 Liferay DXP 7.2 before fix pack 17 Liferay DXP older unsupported versions Liferay Portal older unsupported versions Description:...
CVE-2024-24722
creationtimestamp| type| source ---|---|--- 2024-02-19 07:21:49+00:00| seen| https://t.me/ctinow/187486 2024-02-19 07:21:53+00:00| seen| https://t.me/ctinow/187490 2024-02-20 05:30:40+00:00| seen| https://t.me/arpsyndicate/3557 2025-03-25 16:40:23+00:00| seen|...
CVE-2023-5779
creationtimestamp| type| source ---|---|--- 2024-02-18 09:26:51+00:00| seen| https://t.me/ctinow/187188 2024-02-18 09:26:53+00:00| seen| https://t.me/ctinow/187190...
PT-2024-14583 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of customizable vulnerability alerts, but no specific...
RICOH SP C250/C252 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-14305)
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the print...
CVE-2024-21762
creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 06:40:49+00:00| exploited| https://t.me/thehackernews/4526 2024-02-09 06:59:47+00:00| exploited| https://t.me/KomunitiSiber/1466 2024-02-09 07:19:01+00:00...
CVE-2024-23660
creationtimestamp| type| source ---|---|--- 2024-02-08 21:31:56+00:00| seen| https://t.me/ctinow/181641 2024-02-15 19:17:08+00:00| seen| https://t.me/ctinow/185797 2024-02-15 20:16:27+00:00| seen| https://t.me/BitLenta/25052 2024-02-15 21:31:24+00:00| published-proof-of-concept|...
CVE-2023-1436
creationtimestamp| type| source ---|---|--- 2024-02-08 09:11:54+00:00| seen| https://t.me/ctinow/181234 2024-02-08 09:41:24+00:00| seen| https://t.me/ctinow/181244 2024-02-08 09:41:25+00:00| seen| https://t.me/ctinow/181245 2024-02-08 09:41:26+00:00| seen| https://t.me/ctinow/181246 2024-02-08...
SUSE CVE-2024-23446
An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security DLS or Field-level security FLS when querying the .alerts-security.alerts-spaceid indices. Users who are authorized to call this API may obtain unauthorized access to documents if...
CVE-2024-24311
creationtimestamp| type| source ---|---|--- 2024-02-07 10:26:35+00:00| seen| https://t.me/ctinow/180610 2024-03-01 18:21:31+00:00| seen| https://t.me/ctinow/197858...
Lexmark Printer RCE Vulnerability (CVE-2023-50737)
Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...
PT-2024-1691 · Elastic · Kibana
Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: The issue is related to insufficient access control in the Kibana data visualization service. It allows a remote attacker to impact the confidentiality of protected information. Specifically...
CVE-2023-28120
creationtimestamp| type| source ---|---|--- 2024-02-02 15:27:16+00:00| seen| https://t.me/ctinow/178112 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675452841249 2025-01-09 01:15:42+00:00| seen|...