https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T21:35:12.079879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-28359 EUVD-2026-28359 2026-10-16T21:35:12.082713+00:00 EUVD-2026-28359 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33334 fkie_cve-2021-33334 2026-10-16T21:35:12.082744+00:00

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 6, does not properly check user permissions, which allows remote attackers with the forms "Access in Site Administration" permission to view all forms and form entries in a site via the forms section in site administration.

 https://cve.radiocsirt.org/vuln/ghsa-g37f-j8hh-736f GHSA-g37f-j8hh-736f — Liferay Portal and Liferay DXP Fails to Properly Check User Permissions 2026-10-16T21:35:12.082775+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 6, does not properly check user permissions, which allows remote attackers with the forms "Access in Site Administration" permission to view all forms and form entries in a site via the forms section in site administration.

 https://cve.radiocsirt.org/vuln/gsd-2021-33334 gsd-2021-33334 2026-10-16T21:35:12.082804+00:00 gsd-2021-33334