CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

18974 matches found

Github Security Blog•added 2025/08/22 6:31 p.m.•17 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92 allows ...

5.4CVSS5.6AI score0.00264EPSS

SaveExploits0References12Affected Software1

OSV•added 2025/08/22 6:15 p.m.•12 views

CVE-2025-43760

5.4CVSS5.7AI score

SaveExploits0References1

NVD•added 2025/08/22 6:15 p.m.•12 views

CVE-2025-43760

5.4CVSS0.00264EPSS

SaveExploits0References1

CVE•added 2025/08/22 5:34 p.m.•34 views

CVE-2025-43760

CVE-2025-43760 is a reflected XSS vulnerability in Liferay Portal/DXP (affecting Portal 7.4.0–7.4.3.132 and DXP 2025.Q1.0–2025.Q1.4, plus 2024 Qx and 7.4 GA up to update 92) that allows a remote authenticated attacker to inject JavaScript via the PortalUtil.escapeRedirect. The issue centers on th...

5.4CVSS5.3AI score0.00264EPSS

SaveExploits0References1Affected Software2

OSV•added 2025/08/22 12:30 a.m.•14 views

GHSA-R367-Q549-PGR5 Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 update 32 through update ...

2.1CVSS5.6AI score0.00203EPSS

SaveExploits0References9

OSV•added 2025/08/21 11:15 p.m.•11 views

CVE-2025-43753

5.4CVSS5.7AI score

SaveExploits0References1

NVD•added 2025/08/21 11:15 p.m.•18 views

CVE-2025-43753

5.4CVSS0.00203EPSS

SaveExploits0References1

Cvelist•added 2025/08/21 10:23 p.m.•20 views

CVE-2025-43753

2.1CVSS0.00203EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•17 views

CVE-2025-55103

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

4.8CVSS0.00222EPSS

SaveExploits0References1

NVD•added 2025/08/21 8:15 p.m.•16 views

CVE-2025-55107

4.8CVSS0.00222EPSS

SaveExploits0References1

CVE•added 2025/08/21 7:29 p.m.•38 views

CVE-2025-55106

CVE-2025-55106 concerns Esri Portal for ArcGIS Enterprise Sites, affected versions 10.9.1–11.4. A stored cross-site scripting vulnerability exists where an authenticated user can inject a malicious file containing an XSS script; when the file is loaded, it may execute arbitrary JavaScript in the ...

4.8CVSS6.3AI score0.00222EPSS

SaveExploits0References1Affected Software1

OSV•added 2025/08/21 6:31 p.m.•16 views

GHSA-58CQ-8WM2-6M87 Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92...

5.1CVSS6AI score0.00215EPSS

SaveExploits0References6

OSV•added 2025/08/21 6:31 p.m.•13 views

GHSA-Q2GV-W583-F2VQ Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter...

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References6

Github Security Blog•added 2025/08/21 6:31 p.m.•17 views

Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References6Affected Software1

NVD•added 2025/08/21 5:15 p.m.•16 views

CVE-2025-43756

6.9CVSS0.00219EPSS

SaveExploits0References1

OSV•added 2025/08/21 5:15 p.m.•11 views

CVE-2025-43756

5.4CVSS5.8AI score

SaveExploits0References1

Vulnrichment•added 2025/08/21 4:40 p.m.•3 views

CVE-2025-43755

5.1CVSS6AI score0.00215EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/21 4:34 p.m.•21 views

CVE-2025-43738

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19...

5.1CVSS5.7AI score0.00217EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/21 4:19 p.m.•3 views

CVE-2025-43756

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References1

CVE•added 2025/08/21 4:19 p.m.•32 views

CVE-2025-43756

A reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.132 and Liferay DXP versions 2025.Q1.0–2025.Q1.15, 2025.Q2.0–2025.Q2.2, and 2024.Q1.13–2024.Q1.19. The issue allows a remote authenticated user to inject JavaScript code through the snippet parameter. Impact is described...

6.9CVSS5.7AI score0.00219EPSS

SaveExploits0References1Affected Software2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by