<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T18:18:45.001263+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954</id>
    <title>certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte…</title>
    <updated>2026-10-03T18:18:45.072989+00:00</updated>
    <content>certfr-2025-avi-0954</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-4178</id>
    <title>EUVD-2026-4178</title>
    <updated>2026-10-03T18:18:45.073031+00:00</updated>
    <content>EUVD-2026-4178</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-4178"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-25150</id>
    <title>fkie_cve-2024-25150</title>
    <updated>2026-10-03T18:18:45.073047+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to obtain a user's full name from the page's title by enumerating user screen names.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-25150"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-4585-28v2-8h46</id>
    <title>GHSA-4585-28v2-8h46 — Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel</title>
    <updated>2026-10-03T18:18:45.073078+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p>
<p>Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to obtain a user's full name from the page's title by enumerating user screen names.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-4585-28v2-8h46"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2024-25150</id>
    <title>gsd-2024-25150</title>
    <updated>2026-10-03T18:18:45.073106+00:00</updated>
    <content>gsd-2024-25150</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2024-25150"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428</id>
    <title>WID-SEC-W-2024-0428 — Liferay Portal und DXP: Mehrere Schwachstellen</title>
    <updated>2026-10-03T18:18:45.073118+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428"/>
  </entry>
</feed>
