https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 01:36:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334683 EUVD-2026-334683 https://cve.radiocsirt.org/vuln/euvd-2026-334683 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42120 <p>A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences&#39; `namespace` attribute.</p> <p>A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences&#39; `namespace` attribute.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42120 https://cve.radiocsirt.org/vuln/ghsa-r5fj-j449-vqw2 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.fragment.service, Maven: com.liferay.portal:release.dxp.bom</p> <p>A SQL injection vulnerability in the Fragment module before 4.0.33 from Liferay Portal (7.3.3 through 7.4.3.16), and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences&#39; `namespace` attribute.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.fragment.service, Maven: com.liferay.portal:release.dxp.bom</p> <p>A SQL injection vulnerability in the Fragment module before 4.0.33 from Liferay Portal (7.3.3 through 7.4.3.16), and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences&#39; `namespace` attribute.</p> https://cve.radiocsirt.org/vuln/ghsa-r5fj-j449-vqw2 https://cve.radiocsirt.org/vuln/gsd-2022-42120 gsd-2022-42120 https://cve.radiocsirt.org/vuln/gsd-2022-42120