https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:28:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-190945 EUVD-2026-190945 https://cve.radiocsirt.org/vuln/euvd-2026-190945 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25143 <p>The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.</p> <p>The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25143 https://cve.radiocsirt.org/vuln/ghsa-87m3-6qj3-p3xh <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.</p> https://cve.radiocsirt.org/vuln/ghsa-87m3-6qj3-p3xh https://cve.radiocsirt.org/vuln/gsd-2024-25143 gsd-2024-25143 https://cve.radiocsirt.org/vuln/gsd-2024-25143 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323