https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:13:20 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-190955 EUVD-2026-190955 https://cve.radiocsirt.org/vuln/euvd-2026-190955 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26265 <p>The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system&#39;s temp folder by modifying the `maxFileSize` parameter.</p> <p>The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system&#39;s temp folder by modifying the `maxFileSize` parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-26265 https://cve.radiocsirt.org/vuln/ghsa-29xx-fhff-36m7 <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system&#39;s temp folder by modifying the `maxFileSize` parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system&#39;s temp folder by modifying the `maxFileSize` parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-29xx-fhff-36m7 https://cve.radiocsirt.org/vuln/gsd-2024-26265 gsd-2024-26265 https://cve.radiocsirt.org/vuln/gsd-2024-26265 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440