CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

OSV•added 2025/08/23 6:30 a.m.•2 views

GHSA-23W4-RPC6-WPCC Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS6.8AI score0.001EPSS

Exploits0References5

OSV•added 2025/08/23 5:15 a.m.•1 views

CVE-2025-43764

6.5CVSS6.6AI score0.001EPSS

Exploits0References1

NVD•added 2025/08/23 5:15 a.m.•2 views

CVE-2025-43764

6.9CVSS0.001EPSS

Exploits0References1

CVE•added 2025/08/23 4:49 a.m.•11 views

CVE-2025-43764

CVE-2025-43764 describes a Self-ReDoS issue in Liferay Portal/DXP where the Role Name search field in Kaleo Designer Web portlet can be abused by an authenticated user with update permissions to submit a pathological regular expression, causing the browser to hang. Affected are Liferay Portal 7.4...

6.9CVSS6.9AI score0.001EPSS

Exploits0References1Affected Software2

Vulnrichment•added 2025/08/23 4:49 a.m.•1 views

CVE-2025-43764

6.9CVSS6.9AI score0.001EPSS

Exploits0References1

Cvelist•added 2025/08/23 4:49 a.m.•4 views

CVE-2025-43764

6.9CVSS0.001EPSS

Exploits0References1

Positive Technologies•added 2025/08/23 12:0 a.m.•3 views

PT-2025-34518 · Liferay · Liferay Portal +2

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.131 Liferay DXP versions 2024.Q1.1 through 2024.Q1.20 Liferay DXP versions 2024.Q2.1 through 2024.Q2.13 Liferay DXP versions 2024.Q3.0 through 2024.Q3.13 Liferay DXP versions 2024.Q4.0 through...

6.9CVSS6.2AI score0.001EPSS

Exploits0References10

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by