441
|
- |
|
-
|
-
|
If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of …
New
|
-
|
CVE-2024-47804
|
2024-10-3 01:15 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
442
|
- |
|
-
|
-
|
Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.
New
|
-
|
CVE-2024-47803
|
2024-10-3 01:15 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
443
|
- |
|
-
|
-
|
FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the conte…
New
|
-
|
CVE-2024-33209
|
2024-10-3 01:15 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
444
|
- |
|
-
|
-
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Update
|
-
|
CVE-2024-5480
|
2024-10-3 01:15 |
2024-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
445
|
- |
|
-
|
-
|
The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupp…
Update
|
-
|
CVE-2024-26265
|
2024-10-3 01:15 |
2024-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
446
|
8.1 |
HIGH
Network
|
liferay
|
dxp liferay_portal
|
In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter…
Update
|
NVD-CWE-noinfo
|
CVE-2024-25148
|
2024-10-3 01:15 |
2024-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
447
|
6.5 |
MEDIUM
Network
|
liferay
|
dxp liferay_portal
|
The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported ve…
Update
|
CWE-834
Excessive Iteration
|
CVE-2024-25144
|
2024-10-3 01:15 |
2024-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
448
|
- |
|
-
|
-
|
The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions,…
Update
|
-
|
CVE-2024-25143
|
2024-10-3 01:15 |
2024-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
449
|
4.3 |
MEDIUM
Network
|
liferay
|
digital_experience_platform liferay_portal
|
The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a lis…
Update
|
CWE-862
Missing Authorization
|
CVE-2023-3426
|
2024-10-3 01:15 |
2023-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
450
|
9.8 |
CRITICAL
Network
artbees
|
jupiter_x_core
|
The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and including, 4.6.5. This m…
Update
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-7772
|
2024-10-3 01:10 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|