https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:28:28 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0811 certfr-2025-avi-0811 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0811 https://cve.radiocsirt.org/vuln/euvd-2026-253298 EUVD-2026-253298 https://cve.radiocsirt.org/vuln/euvd-2026-253298 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43814 <p>In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote authenticated users to obtain a user’s password reminder answer via the audit events.</p> <p>In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote authenticated users to obtain a user’s password reminder answer via the audit events.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43814 https://cve.radiocsirt.org/vuln/ghsa-ph63-chvv-8x46 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.portal.security.audit.event.generators.user.management</p> <p>In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote authenticated users to obtain a user’s password reminder answer via the audit events.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.portal.security.audit.event.generators.user.management</p> <p>In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote authenticated users to obtain a user’s password reminder answer via the audit events.</p> https://cve.radiocsirt.org/vuln/ghsa-ph63-chvv-8x46 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2106 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen und Daten zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2106