Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 125
Reset filtersLiferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Liferay Portal and Liferay DXP Fails to Check Permissions
Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution
Liferay Portal and Liferay DXP Fails to Sanitize API Data
Liferay Portal and Liferay DXP allows arbitrary injection via web content template names
Liferay Portal and Liferay DXP allows arbitrary injection via the site name
Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category
Liferay Portal and Liferay DXP allows arbitrary injection via form field
Liferay Portal and Liferay DXP fails to properly import users from LDAP
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.