Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:21:38 +0000 certfr-2025-avi-0800 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 certfr-2025-avi-0800 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 EUVD-2026-252853 https://cve.radiocsirt.org/vuln/euvd-2026-252853 EUVD-2026-252853 https://cve.radiocsirt.org/vuln/euvd-2026-252853 fkie_cve-2025-43804 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43804 <p>Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_search_web_portlet_SearchPortlet_userId parameter.</p> <p>Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_search_web_portlet_SearchPortlet_userId parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43804 GHSA-ccrc-5vp5-vp5j — Liferay search widget vulnerable to Cross-site Scripting https://cve.radiocsirt.org/vuln/ghsa-ccrc-5vp5-vp5j <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.portal.search</p> <p>There is a Cross-site scripting (XSS) vulnerability in Liferay Portal&#39;s Search widget . Versions 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allow remote attackers to inject arbitrary web scripts or HTML via the `_com_liferay_portal_search_web_portlet_SearchPortlet_userId` parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.portal.search</p> <p>There is a Cross-site scripting (XSS) vulnerability in Liferay Portal&#39;s Search widget . Versions 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allow remote attackers to inject arbitrary web scripts or HTML via the `_com_liferay_portal_search_web_portlet_SearchPortlet_userId` parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-ccrc-5vp5-vp5j WID-SEC-W-2025-2076 — Liferay Portal: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076