Lucene search
+L

134 matches found

vulnersOsv
vulnersOsv
•added 2026/10/01 4:38 p.m.•5 views

plone-app-layout (>=4.0.0a1, <=4.0.0a4) potentially affected by CVE-2026-57149 via plone-app-portlets (5.0.2)

plone-app-portlets PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-layout =4.0.0a1, =4.0.0a4 Source cves: CVE-2026-57149 Source advisory: OSV:PYSEC-2026-4138...

9.9CVSS5.8AI score0.00638EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 1:55 p.m.•4 views

plone-app-layout (>=4.0.0a1, <=4.0.0a4) potentially affected by CVE-2026-57149 via plone-app-portlets (5.0.2)

plone-app-portlets PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-layout =4.0.0a1, =4.0.0a4 Source cves: CVE-2026-57149 Source advisory: OSV:GHSA-RR49-F9G6-C9R5...

9.9CVSS5.8AI score0.00638EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/10 9:44 a.m.•4 views

plone-app-layout (>=4.0.0a1, <=4.0.0a4) potentially affected by CVE-2026-55248 via plone-app-portlets (5.0.2)

plone-app-portlets PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-layout =4.0.0a1, =4.0.0a4 Source cves: CVE-2026-55248 Source advisory: OSV:PYSEC-2026-3884...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/10 9:44 a.m.•3 views

plone-app-z3cform (>=4.0.0a1, <=4.0.0a10) potentially affected by CVE-2026-55248 via plone-app-portlets (4.4.0)

plone-app-portlets PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-z3cform =4.0.0a1, =4.0.0a10 Source cves: CVE-2026-55248 Source advisory: OSV:PYSEC-2026-3884...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/10 9:44 a.m.•4 views

plone-app-portlets (>=5.0.0a3, <=5.0.0a4) potentially affected by CVE-2026-55247 via plone-app-event (3.2.1)

plone-app-event PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2026-55247 Source advisory: OSV:PYSEC-2026-3883...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:59 p.m.•4 views

plone-app-portlets (>=5.0.0a3, <=5.0.0a4) potentially affected by CVE-2026-55247 via plone-app-event (3.2.1)

plone-app-event PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2026-55247 Source advisory: OSV:GHSA-R82H-MQW3-FC56...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:41 p.m.•4 views

plone-app-z3cform (>=4.0.0a1, <=4.0.0a10) potentially affected by CVE-2026-55248 via plone-app-portlets (4.4.0)

plone-app-portlets PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-z3cform =4.0.0a1, =4.0.0a10 Source cves: CVE-2026-55248 Source advisory: OSV:GHSA-X5G3-W747-2H8Q...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:41 p.m.•4 views

plone-app-layout (>=4.0.0a1, <=4.0.0a4) potentially affected by CVE-2026-55248 via plone-app-portlets (5.0.2)

plone-app-portlets PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-layout =4.0.0a1, =4.0.0a4 Source cves: CVE-2026-55248 Source advisory: OSV:GHSA-X5G3-W747-2H8Q...

9.1CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/09 4:49 p.m.•4 views

plone-app-portlets (>=5.0.0a3, <=5.0.0a4) potentially affected by CVE-2020-28736 via plone-app-event (3.2.1)

plone-app-event PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2020-28736 Source advisory: OSV:PYSEC-2026-2882...

8.8CVSS7.7AI score0.01453EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/09 4:49 p.m.•3 views

plone-app-portlets (>=5.0.0a3, <=5.0.0a4) potentially affected by CVE-2020-28734 via plone-app-event (3.2.1)

plone-app-event PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2020-28734 Source advisory: OSV:PYSEC-2026-2883...

8.8CVSS7.7AI score0.01453EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/09 4:49 p.m.•6 views

plone-app-portlets (>=5.0.0a3, <=5.0.0a4) potentially affected by CVE-2020-28735 via plone-app-event (3.2.1)

plone-app-event PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2020-28735 Source advisory: OSV:PYSEC-2026-2884...

8.8CVSS7.7AI score0.01453EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•29 views

CVE-2025-6596

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/portlets.Js, resources/skins.Vector.Legacy.Js/portlets.Js. This issue affects Vecto...

5.9AI score0.00439EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/02 11:16 p.m.•21 views

CVE-2025-6596

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/portlets.Js, resources/skins.Vector.Legacy.Js/portlets.Js. This issue affects Vecto...

0.00439EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/02/02 11:16 p.m.•28 views

UBUNTU-CVE-2025-6596

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/portlets.Js, resources/skins.Vector.Legacy.Js/portlets.Js. This issue affects Vecto...

5.9AI score0.00439EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/02/02 10:58 p.m.•24 views

CVE-2025-6596

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/portlets.Js, resources/skins.Vector.Legacy.Js/portlets.Js. This issue affects Vecto...

5.9AI score0.00439EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2025/11/25 8:01 a.m.•20 views

Open Redirect

liferay-portal is vulnerable to an Open Redirect vulnerability. The vulnerability is due to multiple settings portlets failing to validate user-supplied redirect parameters, where the System Settings, Instance Settings, and Site Settings portlets blindly trust values passed via their respective...

6.1CVSS6.1AI score0.00239EPSS
SaveExploits0References5Affected Software2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-4062

Malware in sbrugna...

6.5CVSS6.6AI score0.01844EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-0885

Malware in sbrugna...

4.3CVSS5.8AI score0.00931EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2006-0435

Malware in sbrugna...

7.5CVSS6.4AI score0.02906EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2022-3417

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.01832EPSS
SaveExploits0References5
Rows per page
Query Builder