288 matches found
Liferay Profile Widget does not prevent vCard extension spoofing
The Profile Widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
EUVD-2021-10851
Malware in sbrugna...
EUVD-2005-0587
Malware in sbrugna...
EUVD-2004-1484
Malware in sbrugna...
EUVD-2015-5867
Malware in sbrugna...
EUVD-2021-18917
Malware in sbrugna...
EUVD-2017-0248
Malware in sbrugna...
EUVD-2005-1108
Malware in sbrugna...
EUVD-2010-2263
Malware in sbrugna...
EUVD-2009-1304
Malware in sbrugna...
CVE-2025-43824
The CVE-2025-43824 affects the Profile widget in Liferay Portal 7.4.0–7.4.3.111 (and older unsupported versions) and Liferay DXP 2023.Q3–2023.Q4 and 7.4 GA up to update 92. The root cause is a user name being included in the Content-Disposition header, allowing remote authenticated users to chang...
CVE-2025-43824
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
PT-2025-40950
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q3.8 Liferay DXP versions 2023.Q4.0 through 2023.Q4.5 Liferay Portal 7.4 GA through update 92 Description The Profile widget is susceptible to a...
EUVD-2022-7200
Malicious code in bioql PyPI...
EUVD-2025-25223
Malicious code in bioql PyPI...
EUVD-2023-1445
Malicious code in bioql PyPI...
EUVD-2025-21377
Malicious code in bioql PyPI...
EUVD-2025-25227
Malicious code in bioql PyPI...
EUVD-2022-0092
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2015-5921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9 mishandles Content-Disposition: attachment HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive...