Skip to content
Noroxi

foobar7

33 credited records · 1 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for foobar7

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-62265
    19Monitor

    Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 30, 2025

  • CVE-2025-62252
    21Monitor

    Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62246
    19Monitor

    Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Li

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62242
    21Monitor

    Insecure Direct Object Reference (IDOR) vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 20

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62241
    21Monitor

    Insecure Direct Object Reference (IDOR) vulnerability with shipment addresses in Liferay DXP 2023.Q4.1 through 2023.Q4.5 allows remote authe

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62243
    21Monitor

    Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 t

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62244
    19Monitor

    Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 t

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 13, 2025

  • CVE-2025-62245
    20Monitor

    Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023

    MediumCVSS 5.1No exploitEPSS 0%

    liferay · digital experience platformOct 10, 2025

  • CVE-2025-62239
    18Monitor

    Cross-site scripting (XSS) vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0

    MediumCVSS 4.6No exploitEPSS 0%

    liferay · digital experience platformOct 10, 2025

  • CVE-2025-62238
    19Monitor

    Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 10, 2025

  • CVE-2025-62237
    19Monitor

    Stored cross-site scripting (XSS) vulnerability in Commerce’s view order page in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 10, 2025

  • CVE-2025-62240
    19Monitor

    Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 9, 2025

  • CVE-2025-43771
    19Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay D

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 8, 2025

  • CVE-2025-43830
    20Monitor

    Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q

    MediumCVSS 5.1No exploitEPSS 0%

    liferay · digital experience platformOct 8, 2025

  • CVE-2025-43829
    19Monitor

    Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Lifer

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 8, 2025

  • CVE-2025-43821
    19Monitor

    Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Life

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 8, 2025

  • CVE-2025-43822
    19Monitor

    Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 7, 2025

  • CVE-2025-43823
    19Monitor

    Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 202

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 7, 2025

  • CVE-2025-43824
    19Monitor

    The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformOct 6, 2025

  • CVE-2025-43827
    21Monitor

    Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported ver

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformSep 30, 2025

  • CVE-2025-43820
    19Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35 through

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformSep 29, 2025

  • CVE-2025-43818
    19Monitor

    Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 thro

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformSep 29, 2025

  • CVE-2025-43811
    19Monitor

    Multiple stored cross-site scripting (XSS) vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Lif

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformSep 29, 2025

  • CVE-2025-43810
    21Monitor

    Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2

    MediumCVSS 5.3No exploitEPSS 0%

    liferay · digital experience platformSep 22, 2025

  • CVE-2025-43807
    19Monitor

    Stored cross-site scripting (XSS) vulnerability in the notifications widget in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.

    MediumCVSS 4.8No exploitEPSS 0%

    liferay · digital experience platformSep 22, 2025