https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:57:52 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/euvd-2026-257017 EUVD-2026-257017 https://cve.radiocsirt.org/vuln/euvd-2026-257017 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62260 <p>Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62260 https://cve.radiocsirt.org/vuln/ghsa-vgqx-447m-wvcj <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.</p> https://cve.radiocsirt.org/vuln/ghsa-vgqx-447m-wvcj https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419