https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:49:55.160444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-256 certa-2013-avi-256 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Java</span>. Elles permettent à un attaq… 2026-10-02T23:49:55.390034+00:00 certa-2013-avi-256 https://cve.radiocsirt.org/vuln/euvd-2026-104697 EUVD-2026-104697 2026-10-02T23:49:55.390098+00:00 EUVD-2026-104697 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0401 fkie_cve-2013-0401 2026-10-02T23:49:55.390114+00:00

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-7fc2-vc87-69w8 GHSA-7fc2-vc87-69w8 2026-10-02T23:49:55.390146+00:00

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.

 https://cve.radiocsirt.org/vuln/gsd-2013-0401 gsd-2013-0401 2026-10-02T23:49:55.390164+00:00 gsd-2013-0401 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10534-1 openSUSE-SU-2024:10534-1 — java-1_7_0-openjdk-1.7.0.121-1.1 on GA media 2026-10-02T23:49:55.390176+00:00

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2013:0751 RHSA-2013:0751 — Red Hat Security Advisory: java-1.7.0-openjdk security update 2026-10-02T23:49:55.390367+00:00

OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305) OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814) OpenJDK: JAXP missing security restrictions (JAXP, 6657673) OpenJDK: remote code loading enabled by default (RMI, 8001040) OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329) OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507) ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994) ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986) ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987) OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542) OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724) ICU: Layout Engine font processing errors (JDK 2D, 8001031) OpenJDK: image processing vulnerability (2D, 8007617) OpenJDK: Hotspot MethodHandle lookup error (Hotspot, 8009699) OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857) OpenJDK: incorrect setter access checks in MethodHandles (Hostspot, 8009677) OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435) OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063) OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918) OpenJDK: JPEGImageReader state corrup…

 https://cve.radiocsirt.org/vuln/suse-su-2015:0343-1 SUSE-SU-2015:0343-1 — Security update for IBM Java 2026-10-02T23:49:55.390419+00:00

Security update for IBM Java