Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:40:37 +0000 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 EUVD-2026-207324 https://cve.radiocsirt.org/vuln/euvd-2026-207324 EUVD-2026-207324 https://cve.radiocsirt.org/vuln/euvd-2026-207324 fkie_cve-2023-37940 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37940 <p>Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy&#39;s `Service Class` text field.</p> <p>Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy&#39;s `Service Class` text field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-37940 GHSA-px38-239g-x5mg — Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page https://cve.radiocsirt.org/vuln/ghsa-px38-239g-x5mg <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy&#39;s `Service Class` text field.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy&#39;s `Service Class` text field.</p> https://cve.radiocsirt.org/vuln/ghsa-px38-239g-x5mg gsd-2023-37940 https://cve.radiocsirt.org/vuln/gsd-2023-37940 gsd-2023-37940 https://cve.radiocsirt.org/vuln/gsd-2023-37940 WID-SEC-W-2024-3721 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3721 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3721