https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:22:44 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252791 EUVD-2026-252791 https://cve.radiocsirt.org/vuln/euvd-2026-252791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43797 <p>In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.</p> <p>In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43797 https://cve.radiocsirt.org/vuln/ghsa-25m3-w28p-v3v3 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.site.admin.web</p> <p>In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.site.admin.web</p> <p>In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.</p> https://cve.radiocsirt.org/vuln/ghsa-25m3-w28p-v3v3 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064