https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:11:31 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-4239 EUVD-2026-4239 https://cve.radiocsirt.org/vuln/euvd-2026-4239 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25607 <p>The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a low work factor, which allows attackers to quickly crack password hashes.</p> <p>The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a low work factor, which allows attackers to quickly crack password hashes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25607 https://cve.radiocsirt.org/vuln/ghsa-43h9-p3j4-39hm <p><strong>Affected:</strong> Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.kernel</p> <p>The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a low work factor, which allows attackers to quickly crack password hashes.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.kernel</p> <p>The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a low work factor, which allows attackers to quickly crack password hashes.</p> https://cve.radiocsirt.org/vuln/ghsa-43h9-p3j4-39hm https://cve.radiocsirt.org/vuln/gsd-2024-25607 gsd-2024-25607 https://cve.radiocsirt.org/vuln/gsd-2024-25607 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428