Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:01:53 +0000 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 EUVD-2026-195076 https://cve.radiocsirt.org/vuln/euvd-2026-195076 EUVD-2026-195076 https://cve.radiocsirt.org/vuln/euvd-2026-195076 fkie_cve-2023-3426 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3426 <p>The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.</p> <p>The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3426 GHSA-xph3-vjcq-g488 — Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions https://cve.radiocsirt.org/vuln/ghsa-xph3-vjcq-g488 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.organizations.item.selector.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>The organization selector before 4.0.14 from Liferay Portal (7.4.3.81 through 7.4.3.85), and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.organizations.item.selector.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>The organization selector before 4.0.14 from Liferay Portal (7.4.3.81 through 7.4.3.85), and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.</p> https://cve.radiocsirt.org/vuln/ghsa-xph3-vjcq-g488 gsd-2023-3426 https://cve.radiocsirt.org/vuln/gsd-2023-3426 gsd-2023-3426 https://cve.radiocsirt.org/vuln/gsd-2023-3426 WID-SEC-W-2023-1946 — Liferay DXP und Portal: Schwachstelle ermöglicht Offenlegung von Informationen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1946 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay DXP und Liferay Portal ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay DXP und Liferay Portal ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1946