https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:13:14.325877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0718 certfr-2025-avi-0718 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Certaines d'entre elles permettent à un atta… 2026-10-09T10:13:14.329373+00:00 certfr-2025-avi-0718 https://cve.radiocsirt.org/vuln/euvd-2026-250379 EUVD-2026-250379 2026-10-09T10:13:14.329411+00:00 EUVD-2026-250379 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43755 fkie_cve-2025-43755 2026-10-09T10:13:14.329427+00:00

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.

 https://cve.radiocsirt.org/vuln/ghsa-58cq-8wm2-6m87 GHSA-58cq-8wm2-6m87 — Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter 2026-10-09T10:13:14.329456+00:00

Affected: Maven: com.liferay:com.liferay.layout.admin.web

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1894 WID-SEC-W-2025-1894 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-09T10:13:14.329480+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.