https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T03:48:48.279009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111756 EUVD-2026-111756 2026-10-10T03:48:48.283573+00:00 EUVD-2026-111756 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3422 fkie_cve-2012-3422 2026-10-10T03:48:48.283609+00:00

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.

 https://cve.radiocsirt.org/vuln/ghsa-qwm3-gpj3-x6c9 GHSA-qwm3-gpj3-x6c9 2026-10-10T03:48:48.283643+00:00

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.

 https://cve.radiocsirt.org/vuln/gsd-2012-3422 gsd-2012-3422 2026-10-10T03:48:48.283679+00:00 gsd-2012-3422 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 openSUSE-SU-2024:10316-1 — icedtea-web-javadoc-1.6.2-3.3 on GA media 2026-10-10T03:48:48.283701+00:00

icedtea-web-javadoc-1.6.2-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2012:1132 RHSA-2012:1132 — Red Hat Security Advisory: icedtea-web security update 2026-10-10T03:48:48.283735+00:00

icedtea-web: getvalueforurl uninitialized instance pointer icedtea-web: incorrect handling of not 0-terminated strings