EUVD-2025-30243

Malicious code in bioql PyPI...

Cross-site Request Forgery (CSRF)

Overview com.liferay.portal:portal-impl is a Portal Impl Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the orderUuid parameter in the server license registration process. An attacker can register a server license without authorization by tricking an...

Cross-site Request Forgery (CSRF)

Overview com.liferay.portal:portal-service is a portal service package for Liferay. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the orderUuid parameter in the server license registration process. An attacker can register a server license without...

CVE-2025-43809

Cross-Site Request Forgery CSRF vulnerability in the server license registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allow...

CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...

Integer overflow

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...

CVE-2014-0791

Removed by vendor...

UBUNTU-CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...

CVE-2012-0231

CVE-2012-0231 affects GE Intelligent Platforms Proficy Plant Applications: PRLicenseMgr.exe (Proficy Server License Manager) memory corruption via crafted TCP session on port 12401/TCP, enabling remote denial of service or possible arbitrary code execution. ICS-CERT notes multiple memory corrupti...

CVE-2012-0231

PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12401...