Vuldb Updates

A vulnerability was found in Liferay Portal up to 7.4.3.36. It has been rated as problematic. This issue affects some unknown processing of the component Object Module. Performing a manipulation of the argument Label results in cross site scripting. This vulnerability was named CVE-2022-42115. The attack may be initiated remotely. There is no available exploit.

A vulnerability categorized as problematic has been discovered in Liferay Portal and DXP. Impacted is an unknown function of the component Frontend Editor Module. Executing a manipulation of the argument name/namespace can lead to cross site scripting. The identification of this vulnerability is CVE-2022-42116. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Liferay Portal and DXP. The affected element is an unknown function of the component Frontend Taglib Module. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2022-42117. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Liferay Portal and DXP 7.3.10 SP3. It has been rated as problematic. The affected element is an unknown function of the component Blog Module. Performing a manipulation of the argument Name results in cross site scripting. This vulnerability is reported as CVE-2022-38902. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in SUSE Rancher up to 0.12.14/0.13.10/0.14.5/0.15.1. This impacts an unknown function of the file fleet.yaml of the component Fleet. The manipulation of the argument namespaceLabels results in information disclosure. This vulnerability was named CVE-2026-44938. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in HAVELSAN Liman MYS up to release.master.1106 and classified as very critical. This vulnerability affects unknown code. The manipulation results in injection. This vulnerability is reported as CVE-2026-13696. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in arcinfo PcVue up to 16.x. This impacts an unknown function. This manipulation causes insufficiently protected credentials. This vulnerability is tracked as CVE-2026-14867. The attack is restricted to local execution. No exploit exists.

A vulnerability classified as problematic was found in arcinfo PcVue up to 16.x. Affected is an unknown function. Such manipulation leads to inadequate encryption strength. This vulnerability is listed as CVE-2026-14868. The attack must be carried out locally. There is no available exploit.

A vulnerability, which was classified as very critical, was found in HAVELSAN Liman MYS up to release.master.1106. Affected by this issue is some unknown functionality. Executing a manipulation can lead to missing authorization. This vulnerability is registered as CVE-2026-11340. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Module::Load up to 0.21 and classified as problematic. This affects the function Load of the component Module Loader. The manipulation leads to privilege escalation. This vulnerability is documented as CVE-2011-10043. The attack requires being on the local network. There is not any exploit available.

A vulnerability marked as critical has been reported in Liferay Portal up to 7.4.2. This affects an unknown part of the component Hypermedia REST API. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2022-28981. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Liferay Portal and DXP. It has been declared as critical. Affected by this vulnerability is the function HtmlUtil.escapeRedirect of the component External URL Handler. Such manipulation leads to open redirect. This vulnerability is traded as CVE-2022-28977. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Liferay Portal and DXP. It has been rated as critical. This issue affects some unknown processing of the component Export. The manipulation leads to permission issues. This vulnerability is traded as CVE-2022-38512. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability identified as critical has been detected in Liferay Portal and DXP. The affected element is an unknown function of the component Content Page Handler. This manipulation causes permission issues. This vulnerability is handled as CVE-2022-39975. The attack can only be done within the local network. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in Liferay Portal and DXP. Impacted is an unknown function of the component Parameter Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2022-28980. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in ICEcoder 8.1. This impacts an unknown function. The manipulation leads to pathname traversal. This vulnerability is traded as CVE-2022-34026. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in Academy Learning Management System up to 5.9.0. This vulnerability affects unknown code. Performing a manipulation of the argument Search results in cross site scripting. This vulnerability was named CVE-2022-38553. The attack may be initiated remotely. In addition, an exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Flatpress 1.2.1 and classified as critical. This impacts an unknown function of the component Upload File Handler. The manipulation results in unrestricted upload. This vulnerability is cataloged as CVE-2022-40048. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in mojoPortal 2.7. Affected by this issue is some unknown functionality of the component PNG File Handler. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2022-40341. The attacker must have access to the local network to execute the attack. No exploit exists.

A vulnerability has been found in Heartex Label Studio Community Edition up to 1.5.0 and classified as critical. Affected by this issue is some unknown functionality of the component Import Module. The manipulation leads to server-side request forgery. This vulnerability is documented as CVE-2022-36551. The attack can be initiated remotely. Additionally, an exploit exists. Applying a patch is the recommended action to fix this issue.