Security advisories

critical2024-02-21

CVE-2024-26266-Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting

liferay/liferay-portal · GHSA-rwxc-4cmw-7x75

critical2024-02-21

CVE-2024-26269-Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting

liferay/liferay-portal · GHSA-rwhv-hvj2-qrqm

critical2024-02-21

CVE-2024-25603-Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting

liferay/liferay-portal · GHSA-44jg-jgjx-3xg5

critical2024-02-21

CVE-2024-25147-Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting

liferay/liferay-portal · GHSA-xpjg-7hx7-wgcx

critical2024-02-21

CVE-2024-25602-Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting

liferay/liferay-portal · GHSA-v2xq-m22w-jmpr

critical2024-02-21

CVE-2024-25152-Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting

liferay/liferay-portal · GHSA-p28x-4r5h-ph6j

critical2024-02-21

CVE-2024-25601-Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting

liferay/liferay-portal · GHSA-cr36-3vqf-x5w5

critical2024-02-21

CVE-2023-42498-Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting

liferay/liferay-portal · GHSA-73x3-8mrg-5r93

critical2024-02-21

CVE-2023-42496-Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

liferay/liferay-portal · GHSA-54pv-r62j-9qqc

critical2024-02-21

CVE-2023-40191-Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

liferay/liferay-portal · GHSA-468x-frcm-ghx6

critical2024-02-21

CVE-2024-1631-agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

dfinity/agent-js · GHSA-c9vv-fhgv-cjc3

medium2024-02-21

CVE-2021-29038-Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

liferay/liferay-portal · GHSA-mwhf-6mjm-6w3h

high2024-02-21

CVE-2021-29050-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

liferay/liferay-portal · GHSA-mh9r-9pcx-rx55

medium2024-02-21

CVE-2024-26140-Cross-site Scripting Vulnerability in Statement Browser

yetanalytics/lrs · GHSA-7rw2-3hhp-rc46

medium2024-02-21

ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`

cosmos/cosmos-sdk · GHSA-2557-x9mg-76w8

medium2024-02-21

ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module

cosmos/cosmos-sdk · GHSA-4j93-fm92-rp4m

high2024-02-21

CVE-2024-26135-MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

ylianst/meshcentral · GHSA-cp68-qrhr-g9h8

high2024-02-21

CVE-2024-26134-Potential buffer overflow in CBOR2 decoder

agronholm/cbor2 · GHSA-375g-39jq-vq7m

medium2024-02-21

CVE-2024-26129-Path disclosure in JavaScript variable

prestashop/prestashop · GHSA-3366-9287-7qpr

high2024-02-21

Externally Controlled Format String in Scripting Functions

surrealdb/surrealdb · GHSA-q3gg-m8hr-h4x4