Show filters
63 Total Results
Displaying 61-63 of 63
Sort by:
Attacker Value
Unknown
CVE-2020-15842
Disclosure Date: July 20, 2020 (last updated February 21, 2025)
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.
0
Attacker Value
Unknown
CVE-2020-15841
Disclosure Date: July 20, 2020 (last updated November 28, 2024)
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.
0
Attacker Value
Unknown
CVE-2014-4521
Disclosure Date: July 01, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
0
