https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:53:15.039696+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T10:53:15.043170+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-253819 EUVD-2026-253819 2026-10-05T10:53:15.043239+00:00 EUVD-2026-253819 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43813 fkie_cve-2025-43813 2026-10-05T10:53:15.043255+00:00

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to access arbitrary CSS and JSS files and load the files multiple times via the query string in a URL.

 https://cve.radiocsirt.org/vuln/ghsa-2hm7-r8f3-423h GHSA-2hm7-r8f3-423h — Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet 2026-10-05T10:53:15.043287+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.impl

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to access arbitrary CSS and JSS files and load the files multiple times via the query string in a URL.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2151 WID-SEC-W-2025-2151 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-05T10:53:15.043314+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder einen Denial of Service herbeizuführen.