207 matches found
Improper Access Control
Liferay Portal is vulnerable to improper access control. The vulnerability is due to APIs not restricting access before a user verifies their email address, which allows a remote attacker to access and modify content through the API without proper verification...
CVE-2025-59803
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers e.g., JavaScript in a PDF document that execute during the signing process. When a signer reviews the document, the content appears normal. However, once the signature is applied, the...
Missing Authentication for Critical Function
Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Missing Authentication for Critical Function that allows users to access to and modify content by interacting with certain APIs before email verification is...
Improper Access Control
com.liferay.portal, release.portal.bom is vulnerable to improper access control. The vulnerability is due to the failure to restrict API access before a user changes their initial password, which allows an attacker to remotely access and modify content via the API...
EUVD-2019-3453
Malware in sbrugna...
EUVD-2021-20373
Malware in sbrugna...
EUVD-2020-25972
Malware in sbrugna...
EUVD-2021-23978
Malware in sbrugna...
EUVD-2021-24798
Malware in sbrugna...
EUVD-2018-12312
Malware in sbrugna...
EUVD-2014-2156
Malware in sbrugna...
EUVD-2020-27355
Malware in sbrugna...
EUVD-2008-3871
Malware in sbrugna...
EUVD-2013-2091
Malware in sbrugna...
EUVD-2021-11545
Malware in sbrugna...
EUVD-2020-27518
Malware in sbrugna...
EUVD-2008-3193
Malware in sbrugna...
EUVD-2019-5201
Malware in sbrugna...