Crítica
CVE-2024-25145
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 125
Restablecer filtros
Crítica
CVE-2023-42627
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Crítica
CVE-2023-42628
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Crítica
CVE-2023-44311
Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
Crítica
CVE-2023-44310
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Crítica
CVE-2023-44309
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Crítica
CVE-2023-42629
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Crítica
CVE-2023-42497
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Media
CVE-2023-3426
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
Media
CVE-2023-35029
Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
Alta
CVE-2023-35030
Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module
Media
CVE-2023-3193
Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Crítica
CVE-2022-42122
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Crítica
CVE-2022-42120
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module
Alta
CVE-2022-42121
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module
Media
CVE-2022-42119
Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module
Media
CVE-2022-42118
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Media
CVE-2022-42111
Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module
Media
CVE-2022-42110
Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module
Media
CVE-2022-42132
Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL
Media
CVE-2022-42117
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module
Media
CVE-2022-42116
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module
Media
CVE-2022-42112
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Media
CVE-2022-42114
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.