66 matches found
GHSA-J5GV-W838-MMCX Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Stored cross-site scripting XSS vulnerability in Page Tree menu in Liferay Layout Implementation before 6.0.102 from Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via...
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Stored cross-site scripting XSS vulnerability in Page Tree menu in Liferay Layout Implementation before 6.0.102 from Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via...
CVE-2023-44310
Stored cross-site scripting XSS vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text...
CVE-2023-44310
Stored cross-site scripting XSS vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text...
CVE-2023-44310
CVE-2023-44310 is a stored XSS vulnerability in the Page Tree menu affecting Liferay Portal 7.3.6–7.4.3.78 and Liferay DXP 7.3 (fix pack 1 through Update 23 ) and 7.4 (before Update 79 ). An attacker can inject arbitrary scripts via a crafted payload into a page’s Name field, enabling script exec...
Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
PT-2023-29204 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.6 through 7.4.3.78 Liferay DXP versions 7.3 fix pack 1 through update 23 Liferay DXP version 7.4 before update 79 Description: A stored cross-site scripting XSS issue in the Page Tree menu allows remote attackers t...
SUSE CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...
SUSE CVE-2018-11797
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...
SUSE CVE-2019-9587
There is a stack consumption issue in md5Round1 located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact. This is related...
SUSE CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
PT-2022-24372 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: XPDF versions 4.04 and earlier Description: A stack overflow issue was discovered in the function Catalog::countPageTree at Catalog.cc. This issue affects XPDF and can be exploited via the Catalog::countPageTree function. Recommendations: For...
XPDF 安全漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. A security vulnerability exists in XPDF v4.04, which originates from the Catalog::countPageTree function found to contain a stack overflow via Catalog.cc...
pdfbox: unbounded computation in parser resulting in a denial of service
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...
TYPO3 9.x < 9.5.6 Information Disclosure
The version of TYPO3 installed on the remote host is 9.x prior to 9.5.6. It is, therefore, affected by information disclosure vulnerabilities in its login & page tree components due to a failure to properly restrict access to sensitive information. An authenticated, remote attacker can exploit...
CVE-2019-17063
In Snowtide PDFxStream before 3.7.1 for Java, a crafted PDF file can trigger an extremely long running computation because of page-tree mishandling...
Code injection
In Snowtide PDFxStream before 3.7.1 for Java, a crafted PDF file can trigger an extremely long running computation because of page-tree mishandling...
CVE-2019-17063
In Snowtide PDFxStream before 3.7.1 for Java, a crafted PDF file can trigger an extremely long running computation because of page-tree mishandling...