Portal

CVE-2026-24778 Jan 27, 22:15 npm HIGH PATCH This Week

Ghost is an open source content management system. [CVSS 8.8 HIGH]

CVE-2019-13343 Oct 02, 16:15 HIGH POC PATCH This Week

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2019-7551 Apr 10, 17:29 CRITICAL POC Act Now

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2016-1181 Jul 04, 22:59 Maven HIGH PATCH This Week

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

CVE-2014-8268 Feb 01, 02:59 MEDIUM PATCH This Month

QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.

CVE-2014-8267 Feb 01, 02:59 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2014-8266 Feb 01, 02:59 MEDIUM PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.