Arbitrary Code Execution

portal-impl is vulnerable to arbitrary code execution. The library allows untrusted deserialization of serialized data, potentially allowing an attacker to inject arbitrary objects during deserialization which can result in arbitrary code execution...

Authentication Bypass

portal-impl is vulnerable to authentication bypass. The vulnerability exists as the doPost method of TunnelServlet did not properly conduct permission checks...

Remote Code Execution (RCE)

portal-impl is vulnerable to remote code execution RCE. The vulnerability exists as the velocity and freemarker templates were not properly restricting loading of remote classes...

Unauthorized Access

portal-impl allows unauthorized access. A permissions issue can result in a user having permissions that the user should not have access to...

Remote Code Execution (RCE)

portal-impl is vulnerable to remote code execution. The vulnerability exists as it allows untrusted deserialization of other classes through JSONWS, com/liferay/portal/jsonwebservice/JSONWebServiceActionImpl, which may not be permitted by liferay...

OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

PT-2019-16421

Name of the Vulnerable Software and Affected Versions flatbuffers crate versions prior to 0.6.1 Description An issue in the flatbuffers crate for Rust allows arbitrary bytes to be reinterpreted as a bool, defeating soundness. The implementation of impl Follow for bool enables this reinterpretatio...

OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-1003013: Improper Neutralization of Input During Web Page Generation

An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java,...

XML External Entity Injection (XXE)

bw-calendar-engine-impl is vulnerable to XML external entity injection XXE. The vulnerability exists since the IscheduleClient XML parser does not restrict external DTDs which would allow an attacker to perform XXE attacks via a crafted XML document...

Libsixel Illegal Address Access Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. An illegal address access vulnerability exists in the 'sixeldecoderawimpl' function of the fromsixel.c file in libsixel version 1.8.2, which can be exploited by an attacker t...

PT-2018-14728

Name of the Vulnerable Software and Affected Versions International Components for Unicode ICU for C/C++ version 63.1 Description The issue is related to an integer overflow in the toScientificString function within the number::impl::DecimalQuantity class, located in the i18n/number...

CVE-2018-18928: Integer Overflow or Wraparound

International Components for Unicode ICU for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString in i18n/numberdecimalquantity.cpp...

OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2018-1109

Name of the Vulnerable Software and Affected Versions Android versions 8.0 Description The issue is related to the bta scan results cb impl function in btif ble scanner.cc, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denial of service...

Cross-site Scripting (XSS)

Liferay portal-impl is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the portletID field when a portlet is deployed, allowing a malicious user to inject and execute arbitrary web script...

chromium-browser: same-origin bypass in blink

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...