9 matches found
PT-2025-34504 · Liferay · Liferay Portal +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.86 through 7.4.3.131 Liferay DXP versions 2024.Q1.1 through 2024.Q1.12 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q3.1 through 2024.Q3.9 Liferay Portal versions 7.4 update 86...
xdg-desktop-portal bug fix and enhancement update
An update is available for xdg-desktop-portal. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
PT-2023-24586
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.4 through 7.4.3.68 Liferay DXP versions 7.3 before update 24 Liferay DXP versions 7.4 before update 69 Description A cross-site scripting XSS issue in the Layout module allows remote attackers to inject arbitrary we...
PT-2023-24589 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.4 through 7.4.3.60 Liferay DXP 7.4 before update 61 Description: The issue allows remote authenticated users in one virtual instance to view object definitions from a second virtual instance by searching for the...
PT-2022-26261 · Cksource +1 · Ckeditor +2
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.2 through 7.4.3.14 Liferay DXP versions 7.3 before update 6 Liferay DXP versions 7.4 before update 15 Description: A Cross-site scripting XSS issue exists due to the integration of the Frontend Editor module with...
SUSE SLED15 / SLES15 Security Update : flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (SUSE-SU-2021:1094-1)
This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues : libostree : Update to version 2020.8 Enable LTO. bsc1133120 This update contains scalability improvements and bugfixes. Caching-related HTTP headers are now supported on summaries and...
PT-2021-11118 · Siemens · Tia Portal +1
Name of the Vulnerable Software and Affected Versions: PCS neo Administration Console versions prior to V3.1 TIA Portal versions V15 through V16 Description: A vulnerability has been identified that could allow a local attacker to execute code with SYSTEM privileges by manipulating certain files ...
GuppY 2.4 - HTML Injection
GuppY 2.4 - HTML Injection source: https://www.securityfocus.com/bid/8717/info It has been reported that one of the scripts included with GuppY is vulnerable to an HTML injection attack. The script, "postguest.php", does not perform input validation to prevent the inclusion of HTML/script content...
