https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:55:05 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0940 certfr-2025-avi-0940 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0940 https://cve.radiocsirt.org/vuln/euvd-2026-257233 EUVD-2026-257233 https://cve.radiocsirt.org/vuln/euvd-2026-257233 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62257 <p>Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.</p> <p>Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62257 https://cve.radiocsirt.org/vuln/ghsa-8hw3-ghwv-crfh <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.</p> https://cve.radiocsirt.org/vuln/ghsa-8hw3-ghwv-crfh https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2446 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2446