https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:54:41 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0810 certfr-2025-avi-0810 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0810 https://cve.radiocsirt.org/vuln/euvd-2026-253153 EUVD-2026-253153 https://cve.radiocsirt.org/vuln/euvd-2026-253153 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43809 <p>Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the &#39;orderUuid&#39; parameter.</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the &#39;orderUuid&#39; parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43809 https://cve.radiocsirt.org/vuln/ghsa-697h-3q6m-jwp4 <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the &#39;orderUuid&#39; parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the &#39;orderUuid&#39; parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-697h-3q6m-jwp4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2095 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2095