https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:08:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/euvd-2026-256993 EUVD-2026-256993 https://cve.radiocsirt.org/vuln/euvd-2026-256993 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62261 <p>Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62261 https://cve.radiocsirt.org/vuln/ghsa-xcj6-xpjg-c4xr <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.</p> https://cve.radiocsirt.org/vuln/ghsa-xcj6-xpjg-c4xr https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419