CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

807 matches found

OSV•added 2025/10/30 12:31 a.m.•4 views

GHSA-8HW3-GHWV-CRFH Liferay Portal vulnerable to password enumeration

Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers t...

6.3CVSS7.1AI score0.00368EPSS

Exploits0References7

Vulnrichment•added 2025/10/18 6:42 a.m.•6 views

CVE-2025-11391 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible for unauthenticated attackers to uplo...

9.8CVSS7.2AI score0.00928EPSS

Exploits1References3

Cvelist•added 2025/10/14 2:59 p.m.•11 views

CVE-2025-54892 A user with elevated privileges can inject XSS in the SNMP traps group configuration page

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring SNMP traps group configuration modules allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from...

6.8CVSS0.00241EPSS

Exploits0References2

CNNVD•added 2025/10/14 12:0 a.m.•3 views

Fortinet FortiIsolator 代码问题漏洞

Fortinet FortiIsolator is a Fortinet application that provides remote security isolation capabilities for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects critical business data from sophisticated threats on the Web...

9.1CVSS7.4AI score0.00365EPSS

Exploits0References2