https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:40:35 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-202133 EUVD-2026-202133 https://cve.radiocsirt.org/vuln/euvd-2026-202133 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29038 <p>Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user&#39;s password reminder answers.</p> <p>Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user&#39;s password reminder answers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29038 https://cve.radiocsirt.org/vuln/ghsa-mwhf-6mjm-6w3h <p><strong>Affected:</strong> Maven: com.liferay.portal:portal-impl, Maven: com.liferay:com.liferay.users.admin.web, Maven: com.liferay:com.liferay.login.web, Maven: com.liferay.commerce:com.liferay.commerce.account.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user&#39;s password reminder answers.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:portal-impl, Maven: com.liferay:com.liferay.users.admin.web, Maven: com.liferay:com.liferay.login.web, Maven: com.liferay.commerce:com.liferay.commerce.account.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user&#39;s password reminder answers.</p> https://cve.radiocsirt.org/vuln/ghsa-mwhf-6mjm-6w3h https://cve.radiocsirt.org/vuln/gsd-2021-29038 gsd-2021-29038 https://cve.radiocsirt.org/vuln/gsd-2021-29038 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323