Security advisories

medium2022-03-04

CVE-2021-38269-Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module

View chart →

liferay/liferay-portal · GHSA-vw6g-gh6c-8qwp

medium2022-03-04

CVE-2021-38267-Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page

View chart →

liferay/liferay-portal · GHSA-r39x-3qq4-gxmr

medium2022-03-04

CVE-2021-38263-Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console

View chart →

liferay/liferay-portal · GHSA-ffmm-5ww2-g3q4

medium2022-03-04

CVE-2021-38264-Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter

View chart →

liferay/liferay-portal · GHSA-9536-m86r-q297

medium2022-03-04

CVE-2021-38265-Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)

View chart →

liferay/liferay-portal · GHSA-3x83-whxw-pvmg

high2022-03-04

CVE-2022-0528-Incorrect Authorization in @uppy/companion

View chart →

transloadit/uppy · GHSA-q24h-5rq3-63j9

medium2022-03-04

CVE-2022-25146-Liferay Portal and Liferay DXP fails to check origin of event messages

View chart →

liferay/liferay-portal · GHSA-ghw5-998m-vw4w

medium2022-03-04

CVE-2022-24563-Cross-site Scripting in GeniXCMS

View chart →

semplon/genixcms · GHSA-5mwx-f6w6-7w5r

critical2022-03-04

CVE-2022-0841-OS Command injection in npm-lockfile

View chart →

ljharb/npm-lockfile · GHSA-cr6m-62pq-hmqh

critical2022-03-04

CVE-2022-23898-SQL injection in net.mingsoft:ms-mcms

View chart →

ming-soft/mcms · GHSA-p94q-9q2m-pfh2

critical2022-03-04

CVE-2022-23899-SQL injection in net.mingsoft:ms-mcms

View chart →

ming-soft/mcms · GHSA-968c-mm28-jfw4

medium2022-03-04

CVE-2021-3620-Ansible discloses sensitive information in traceback error message

View chart →

ansible/ansible · GHSA-4r65-35qq-ch8j

high2022-03-04

CVE-2021-3762-Path traversal in claircore

View chart →

quay/claircore · GHSA-mq47-6wwv-v79w

critical2022-03-04

CVE-2022-0265-XML External Entity Reference in Hazelcast

View chart →

hazelcast/hazelcast · GHSA-99wh-973f-779p

high2022-03-03

CVE-2024-22051-Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

View chart →

gjtorikian/commonmarker · GHSA-fmx4-26r3-wxpf

medium2022-03-03

CVE-2022-24725-Exposure of home directory through shescape on Unix with Bash

View chart →

ericcornelissen/shescape · GHSA-446w-rrm4-r47f

medium2022-03-03

CVE-2022-24723-Leading white space bypasses protocol validation

View chart →

medialize/uri.js · GHSA-gmv4-r438-p67f

high2022-03-03

Execution with Unnecessary Privileges in arc-electron

View chart →

advanced-rest-client/arc-electron · GHSA-v3wr-67px-44xg

high2022-03-03

CVE-2022-21716-Twisted SSH client and server deny of service during SSH handshake.

View chart →

twisted/twisted · GHSA-rv6r-3f5q-9rgx

medium2022-03-03

CVE-2021-38268-Liferay Portal and Liferay DXP has incorrect default permissions for site members

View chart →

liferay/liferay-portal · GHSA-f855-2rvm-5j7h