https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:49:51.469734+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-190945 EUVD-2026-190945 2026-10-07T17:49:51.545027+00:00 EUVD-2026-190945 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25143 fkie_cve-2024-25143 2026-10-07T17:49:51.545076+00:00

The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.

 https://cve.radiocsirt.org/vuln/ghsa-87m3-6qj3-p3xh GHSA-87m3-6qj3-p3xh — Liferay Portal denial of service (memory consumption) 2026-10-07T17:49:51.545125+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.

 https://cve.radiocsirt.org/vuln/gsd-2024-25143 gsd-2024-25143 2026-10-07T17:49:51.545165+00:00 gsd-2024-25143 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 WID-SEC-W-2024-0323 — Liferay Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-07T17:49:51.545186+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.