https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:20:25 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252794 EUVD-2026-252794 https://cve.radiocsirt.org/vuln/euvd-2026-252794 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43798 <p>Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.</p> <p>Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43798 https://cve.radiocsirt.org/vuln/ghsa-4p5r-3jmm-652q <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web</p> <p>Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web</p> <p>Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.</p> https://cve.radiocsirt.org/vuln/ghsa-4p5r-3jmm-652q https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064