Security Advisories | GitStock

high2022-05-24

CVE-2021-33321-Liferay Portal and Liferay DXP insecure default configuration

liferay/liferay-portal · GHSA-jfch-m2x3-2v66

medium2022-05-24

CVE-2021-33326-Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module

liferay/liferay-portal · GHSA-hgjv-7wjr-qwqp

high2022-05-24

CVE-2021-33323-Liferay Portal and Liferay DXP autosaves form data for other users to see

liferay/liferay-portal · GHSA-fxpf-jr2q-vpvv

medium2022-05-24

CVE-2021-33325-Liferay Portal and Liferay DXP Stores User Passwords in Cleartext

liferay/liferay-portal · GHSA-6c88-gvxw-f5hg

medium2022-05-24

CVE-2021-33324-Liferay Portal and Liferay DXP Don't Check Permissions of Pages

liferay/liferay-portal · GHSA-474f-cmx5-gm69

medium2022-05-24

CVE-2021-33327-Liferay Portal and Liferay DXP does not properly check user permission

liferay/liferay-portal · GHSA-22wc-7wmm-v4cc

medium2022-05-24

CVE-2021-33331-Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs

liferay/liferay-portal · GHSA-mj8w-h522-jwm8

medium2022-05-24

CVE-2021-33333-Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions

liferay/liferay-portal · GHSA-g7xc-m762-wg8f

medium2022-05-24

CVE-2021-33334-Liferay Portal and Liferay DXP Fails to Properly Check User Permissions

liferay/liferay-portal · GHSA-g37f-j8hh-736f

medium2022-05-24

CVE-2021-33332-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)

liferay/liferay-portal · GHSA-9995-qvcg-x7g6

medium2022-05-24

CVE-2021-20332-Exposure of Sensitive Information to an Unauthorized Actor in MongoDB Rust Driver

mongodb/mongo-rust-driver · GHSA-4rjr-3gj2-5crq

critical2022-05-24

CVE-2020-21809-NukeViet SQL Injection vulnerability

nukeviet/nukeviet · GHSA-m8jx-mxf9-2rpw

critical2022-05-24

CVE-2020-21808-NukeViet SQL Injection vulnerability via topicsid parameter

nukeviet/nukeviet · GHSA-84gf-rw24-pfqg

medium2022-05-24

CVE-2020-22765-NukeViet Cross-site Scripting via the editor in the News module

nukeviet/nukeviet · GHSA-6j4j-22qg-9ffm

high2022-05-24

CVE-2021-34802-Improper Privilege Management in Neo4j Graph Database

neo4j/neo4j · GHSA-2w4h-f44w-968f

medium2022-05-24

CVE-2021-22145-Generation of Error Message Containing Sensitive Information in Elasticsearch

elastic/elasticsearch · GHSA-q394-h7f5-7f44

medium2022-05-24

CVE-2020-18151-ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

thinkcmf/thinkcmf · GHSA-842m-vp3r-qwwr

medium2022-05-24

CVE-2021-36383-Xen Orchestra Mishandles Authorization

vatesfr/xen-orchestra · GHSA-grvm-gcqf-gh8q

medium2022-05-24

CVE-2021-35440-Smashing Cross-site Scripting vulnerability

smashing/smashing · GHSA-254j-mmc5-qhpx

medium2022-05-24

CVE-2020-36397-LavaLite Stored Cross-site Scripting vulnerability

lavalite/cms · GHSA-3cfg-rxh6-h2rh