https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:48:39.872528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-366 certfr-2017-avi-366 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE . Certaines d'entre elles permettent à un attaquant… 2026-10-02T19:48:39.932963+00:00 certfr-2017-avi-366 https://cve.radiocsirt.org/vuln/cnvd-2017-31310 cnvd-2017-31310 2026-10-02T19:48:39.933020+00:00 cnvd-2017-31310 https://cve.radiocsirt.org/vuln/euvd-2026-192513 EUVD-2026-192513 2026-10-02T19:48:39.933035+00:00 EUVD-2026-192513 https://cve.radiocsirt.org/vuln/fkie_cve-2017-10388 fkie_cve-2017-10388 2026-10-02T19:48:39.933047+00:00

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-8j2p-7p84-f2f5 GHSA-8j2p-7p84-f2f5 2026-10-02T19:48:39.933080+00:00

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2017-10388 gsd-2017-10388 2026-10-02T19:48:39.933098+00:00 gsd-2017-10388 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 openSUSE-SU-2024:10876-1 — java-1_8_0-openjdk-1.8.0.302-2.2 on GA media 2026-10-02T19:48:39.933109+00:00

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2017:2999 RHSA-2017:2999 — Red Hat Security Advisory: java-1.8.0-oracle security update 2026-10-02T19:48:39.933219+00:00

zlib: Out-of-bound pointer arithmetic in inftrees.c zlib: Out-of-bounds pointer arithmetic in inffast.c zlib: Undefined left shift of negative number zlib: Big-endian out-of-bounds pointer lcms2: Out-of-bounds read in Type_MLU_Read() OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109) OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment) OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370) OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711) OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323) OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432) OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327) OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100) OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serializatio…

 https://cve.radiocsirt.org/vuln/suse-su-2017:2989-1 SUSE-SU-2017:2989-1 — Security update for java-1_8_0-openjdk 2026-10-02T19:48:39.933267+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-10388 UBUNTU-CVE-2017-10388 2026-10-02T19:48:39.933291+00:00

Affected: Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).