Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:04:06 +0000 certfr-2025-avi-0785 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0785 certfr-2025-avi-0785 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0785 EUVD-2026-252435 https://cve.radiocsirt.org/vuln/euvd-2026-252435 EUVD-2026-252435 https://cve.radiocsirt.org/vuln/euvd-2026-252435 fkie_cve-2025-43784 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43784 <p>Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entries information via the API Builder.</p> <p>Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entries information via the API Builder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43784 GHSA-fvp7-jj9m-3qpf — Liferay Portal's Incorrect Authorization vulnerability can lead to guest users to obtaining sensitive data https://cve.radiocsirt.org/vuln/ghsa-fvp7-jj9m-3qpf <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.headless.builder.impl</p> <p>An Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entry information via the API Builder.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.headless.builder.impl</p> <p>An Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entry information via the API Builder.</p> https://cve.radiocsirt.org/vuln/ghsa-fvp7-jj9m-3qpf WID-SEC-W-2025-2030 — Liferay Portal und DXPL: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2030 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2030