Medium
CVE-2021-33333
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filters
Medium
CVE-2021-33332
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-33331
Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs
Medium
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
Medium
CVE-2021-29048
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page
Medium
CVE-2021-29043
Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password
High
CVE-2021-29053
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
Medium
CVE-2021-29046
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter
Medium
CVE-2021-29045
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Medium
CVE-2021-29044
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page
Medium
CVE-2021-29051
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Medium
CVE-2021-29052
Liferay Portal and Liferay DXP Fails to Check Permissions
Medium
CVE-2021-29040
Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages
Medium
CVE-2021-29039
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page
High
CVE-2021-29047
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Medium
CVE-2021-29041
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module
Medium
CVE-2020-25476
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
Medium
CVE-2020-15840
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
High
CVE-2020-15842
Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability
High
CVE-2020-15841
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
High
CVE-2020-13445
Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution
Medium
CVE-2020-13444
Liferay Portal and Liferay DXP Fails to Sanitize API Data
Critical
Exploited in attacks
CVE-2020-7961
Deserialization of Untrusted Data in Liferay Portal
Medium
CVE-2020-7934
Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.