CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

147 matches found

Rapid7 Vulnerability Database (full)•added 2022/03/02 12:00 a.m.•5 views

CVE-2021-38268: Incorrect Default Permissions

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.6, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 2 incorrectly sets default permissions for site members, which allows remote authenticated users with the site...

6.5CVSS6.5AI score0.00777EPSS

SaveExploits0References6

CNNVD•added 2022/03/02 12:00 a.m.•27 views

Liferay Portal 安全漏洞

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and so on. A security vulnerability exists in Liferay Portal...

6.5CVSS6.4AI score0.00777EPSS

SaveExploits0References4

osv-cve•added 2021/08/03 9:15 p.m.•24 views

CVE-2021-33334

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 6, does not properly check user permissions, which allows remote attackers with the forms "Access in Site Administration" permission to vi...

4.3CVSS6.7AI score

SaveExploits0References2

NVD•added 2021/08/03 9:15 p.m.•38 views

CVE-2021-33334

4.3CVSS0.00861EPSS

SaveExploits0References2

Prion•added 2021/08/03 9:15 p.m.•35 views

Design/Logic Flaw

4CVSS4.6AI score0.00861EPSS

SaveExploits0References2Affected Software2

attackerkb•added 2021/08/03 9:15 p.m.•11 views

CVE-2021-33334

4.3CVSS6AI score0.00861EPSS

SaveExploits0References3

CVE•added 2021/08/03 8:52 p.m.•103 views

CVE-2021-33334

CVE-2021-33334 affects Liferay Portal 7.0.0–7.3.2 and Liferay DXP 7.0 (pre-fix pack 94), 7.1 (pre-fix pack 19), and 7.2 (pre-fix pack 6). The Dynamic Data Mapping module does not properly enforce user permissions, allowing remote attackers with the forms "Access in Site Administration" permission...

4.3CVSS4.5AI score0.00861EPSS

SaveExploits0References2Affected Software2

Cvelist•added 2021/08/03 8:52 p.m.•47 views

CVE-2021-33334

4.9AI score0.00861EPSS

SaveExploits0References2

osv-cve•added 2021/08/03 7:15 p.m.•24 views

CVE-2021-33323

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user...

7.5CVSS7.1AI score

SaveExploits0References2

NVD•added 2021/08/03 7:15 p.m.•34 views

CVE-2021-33323

7.5CVSS0.01028EPSS

SaveExploits0References2

attackerkb•added 2021/08/03 7:15 p.m.•11 views

CVE-2021-33323

7.5CVSS7AI score0.01028EPSS

SaveExploits0References3

Prion•added 2021/08/03 7:15 p.m.•39 views

Design/Logic Flaw

5CVSS7.6AI score0.01028EPSS

SaveExploits0References2Affected Software2

CVE•added 2021/08/03 6:19 p.m.•77 views

CVE-2021-33323

The CVE-2021-33323 entry describes a vulnerability in the Dynamic Data Mapping module of Liferay Portal 7.1.0–7.3.2 and Liferay DXP 7.1 (before fix pack 19) and 7.2 (before fix pack 7), where autosaving of form values for unauthenticated users can be viewed by loading the form as an unauthenticat...

7.5CVSS7.6AI score0.01028EPSS

SaveExploits0References2Affected Software2

Cvelist•added 2021/08/03 6:19 p.m.•51 views

CVE-2021-33323

7.8AI score0.01028EPSS

SaveExploits0References2

Positive Technologies•added 2021/08/03 12:00 a.m.•7 views

PT-2021-20104

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.1.0 through 7.3.2 Liferay DXP versions 7.1 before fix pack 19 Liferay DXP versions 7.2 before fix pack 7 Description The Dynamic Data Mapping module autosaves form values for unauthenticated users, allowing remote...

7.5CVSS0.01028EPSS

SaveExploits0References8

Rapid7 Vulnerability Database (full)•added 2021/08/03 12:00 a.m.•10 views

CVE-2021-33323: Cleartext Storage of Sensitive Information

7.5CVSS5.9AI score0.01028EPSS

SaveExploits0References2

Positive Technologies•added 2021/08/03 12:00 a.m.•6 views

PT-2021-20115

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.0.0 through 7.3.2 Liferay DXP 7.0 before fix pack 94 Liferay DXP 7.1 before fix pack 19 Liferay DXP 7.2 before fix pack 6 Description The Dynamic Data Mapping module does not properly check user permissions, allowing...

4.3CVSS5.7AI score0.00861EPSS

SaveExploits0References9

CNNVD•added 2021/08/03 12:00 a.m.•21 views

Liferay Portal 和 Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

4.3CVSS5.2AI score0.00861EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2021/08/03 12:00 a.m.•9 views

CVE-2021-33334: Incorrect Default Permissions

4.3CVSS5.7AI score0.00861EPSS

SaveExploits0References2

osv-azl•added 2021/05/06 1:15 p.m.•13 views

AZL-6569 CVE-2021-3501 affecting package kernel for versions less than 5.10.78.1-1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and...

7.1CVSS6.6AI score0.00377EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by