Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: digital-experience-platform Clear

ID	Title	Severity	Tags	Detected
CVE-2022-42131	Vulnerability in liferay (CVE-2022-42131) vulnerability in liferay (CVE-2022-42131). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42132	Information Disclosure in liferay (CVE-2022-42132) vulnerability in liferay (CVE-2022-42132). Confidential information can be exposed externally.	Medium	Cwe 200 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42130	Vulnerability in liferay (CVE-2022-42130) vulnerability in liferay (CVE-2022-42130). Risk of unauthorized operations or information disclosure.	Medium	Cwe 276 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42129	Vulnerability in liferay (CVE-2022-42129) vulnerability in liferay (CVE-2022-42129). Risk of unauthorized operations or information disclosure. Exploitable via ``formInstanceRecordId``.	Medium	Cwe 639 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42123	Path Traversal in path-traversal (CVE-2022-42123) path traversal in path-traversal (CVE-2022-42123). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Liferay Digital Experience Platform +1	3 years ago
CVE-2022-42124	Vulnerability in liferay (CVE-2022-42124) vulnerability in liferay (CVE-2022-42124). Risk of unauthorized operations or information disclosure.	High	Cwe 1333 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42125	Path Traversal in path-traversal (CVE-2022-42125) path traversal in path-traversal (CVE-2022-42125). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Liferay Digital Experience Platform +1	3 years ago
CVE-2022-42126	Vulnerability in liferay (CVE-2022-42126) vulnerability in liferay (CVE-2022-42126). Risk of unauthorized operations or information disclosure.	Medium	Cwe 284 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42127	Vulnerability in liferay (CVE-2022-42127) vulnerability in liferay (CVE-2022-42127). Risk of unauthorized operations or information disclosure.	Medium	Cwe 276 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42128	Vulnerability in liferay (CVE-2022-42128) vulnerability in liferay (CVE-2022-42128). Risk of unauthorized operations or information disclosure.	Medium	Cwe 276 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42121	SQL Injection in sqli (CVE-2022-42121) SQL injection in sqli (CVE-2022-42121). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Liferay Liferay Portal +2	3 years ago
CVE-2022-42118	Cross-Site Scripting (XSS) in liferay (CVE-2022-42118) cross-site scripting in liferay (CVE-2022-42118). Risk of unauthorized operations or information disclosure. Exploitable via ``tag``.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal +2	3 years ago
CVE-2022-42112	Cross-Site Scripting (XSS) in liferay (CVE-2022-42112) cross-site scripting in liferay (CVE-2022-42112). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-28977	Open Redirect in liferay (CVE-2022-28977) vulnerability in liferay (CVE-2022-28977). Risk of unauthorized operations or information disclosure. Exploitable via ``FORWARD_URL``.	Medium	Cwe 601 Liferay Digital Experience Platform Dxp +1	3 years ago
CVE-2022-28978	Cross-Site Scripting (XSS) in liferay (CVE-2022-28978) cross-site scripting in liferay (CVE-2022-28978). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-28979	Cross-Site Scripting (XSS) in liferay (CVE-2022-28979) cross-site scripting in liferay (CVE-2022-28979). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-26596	Cross-Site Scripting (XSS) in liferay (CVE-2022-26596) cross-site scripting in liferay (CVE-2022-26596). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2022-26597	Cross-Site Scripting (XSS) in liferay (CVE-2022-26597) cross-site scripting in liferay (CVE-2022-26597). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2022-26593	Cross-Site Scripting (XSS) in liferay (CVE-2022-26593) cross-site scripting in liferay (CVE-2022-26593). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2022-26595	Vulnerability in liferay (CVE-2022-26595) vulnerability in liferay (CVE-2022-26595). Risk of unauthorized operations or information disclosure.	Medium	Cwe 276 Liferay Digital Experience Platform Liferay Portal	4 years ago
CVE-2022-25146	Vulnerability in csrf (CVE-2022-25146) vulnerability in csrf (CVE-2022-25146). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Request Forgery Cwe 346 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38265	Cross-Site Scripting (XSS) in liferay (CVE-2021-38265) cross-site scripting in liferay (CVE-2021-38265). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38267	Cross-Site Scripting (XSS) in liferay (CVE-2021-38267) cross-site scripting in liferay (CVE-2021-38267). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38269	Cross-Site Scripting (XSS) in liferay (CVE-2021-38269) cross-site scripting in liferay (CVE-2021-38269). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal +1	4 years ago
CVE-2021-38263	Cross-Site Scripting (XSS) in liferay (CVE-2021-38263) cross-site scripting in liferay (CVE-2021-38263). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal +1	4 years ago
CVE-2021-38266	Vulnerability in liferay (CVE-2021-38266) vulnerability in liferay (CVE-2021-38266). Risk of unauthorized operations or information disclosure.	High	Liferay Liferay Portal Digital Experience Platform	4 years ago
CVE-2021-38268	Vulnerability in liferay (CVE-2021-38268) vulnerability in liferay (CVE-2021-38268). Data can be tampered with by attackers.	Medium	Cwe 276 Liferay Digital Experience Platform Liferay Portal	4 years ago
CVE-2021-29049	Cross-Site Scripting (XSS) in liferay (CVE-2021-29049) cross-site scripting in liferay (CVE-2021-29049). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	5 years ago
CVE-2021-29048	Cross-Site Scripting (XSS) in liferay (CVE-2021-29048) cross-site scripting in liferay (CVE-2021-29048). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	5 years ago
CVE-2021-29051	Cross-Site Scripting (XSS) in liferay (CVE-2021-29051) cross-site scripting in liferay (CVE-2021-29051). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	5 years ago
CVE-2021-29044	Cross-Site Scripting (XSS) in liferay (CVE-2021-29044) cross-site scripting in liferay (CVE-2021-29044). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	5 years ago
CVE-2021-29043	Vulnerability in liferay (CVE-2021-29043) vulnerability in liferay (CVE-2021-29043). Confidential information can be exposed externally.	Medium	Cwe 522 Liferay Digital Experience Platform Dxp +1	5 years ago
CVE-2021-29040	Vulnerability in liferay (CVE-2021-29040) vulnerability in liferay (CVE-2021-29040). Risk of unauthorized operations or information disclosure.	Medium	Cwe 209 Liferay Digital Experience Platform Liferay Portal	5 years ago

Vulnerabilities

🍪 About cookies