Skip to content
OpenAdvisories

Archive

16 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /16 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2021-29047

    Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use

    The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom Maven
  • Medium 6.5
    CVE-2021-29041

    Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module

    Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of…

    com.liferay.portal:release.dxp.bom Maven
  • Medium 5.3
    CVE-2021-29040

    Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages

    The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom Maven
  • Medium 6.1
    CVE-2021-29039

    Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page

    Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.

    com.liferay.portal:release.portal.bom Maven
  • Unscored —
    CVE-2021-22668

    Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vuln…