https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:33:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 certfr-2025-avi-0800 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 https://cve.radiocsirt.org/vuln/euvd-2026-252866 EUVD-2026-252866 https://cve.radiocsirt.org/vuln/euvd-2026-252866 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43805 <p>Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.</p> <p>Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43805 https://cve.radiocsirt.org/vuln/ghsa-5pp7-m8x8-rc82 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.asset.display.page.service</p> <p>Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.asset.display.page.service</p> <p>Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.</p> https://cve.radiocsirt.org/vuln/ghsa-5pp7-m8x8-rc82 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076