https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:46:24.956143+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2018-2579 Withdrawn: BELL-CVE-2018-2579 — CVE-2018-2579 does not affect BellSoft software 2026-10-02T22:46:25.139828+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2018-avi-036 certfr-2018-avi-036 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T22:46:25.139897+00:00 certfr-2018-avi-036 https://cve.radiocsirt.org/vuln/cnvd-2018-02246 cnvd-2018-02246 2026-10-02T22:46:25.139918+00:00 cnvd-2018-02246 https://cve.radiocsirt.org/vuln/euvd-2026-192356 EUVD-2026-192356 2026-10-02T22:46:25.139933+00:00 EUVD-2026-192356 https://cve.radiocsirt.org/vuln/fkie_cve-2018-2579 fkie_cve-2018-2579 2026-10-02T22:46:25.139943+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-j332-2r4g-m4pj GHSA-j332-2r4g-m4pj 2026-10-02T22:46:25.139976+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2018-2579 gsd-2018-2579 2026-10-02T22:46:25.139997+00:00 gsd-2018-2579 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 openSUSE-SU-2024:10876-1 — java-1_8_0-openjdk-1.8.0.302-2.2 on GA media 2026-10-02T22:46:25.140008+00:00

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:0099 RHSA-2018:0099 — Red Hat Security Advisory: java-1.8.0-oracle security update 2026-10-02T22:46:25.140140+00:00

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525) JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX) OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962) OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449) OpenJDK: DnsClient missing source port randomization (JNDI, 8182125) OpenJDK: loading of classes from untrusted locations (I18n, 8182601) OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387) OpenJDK: insufficient strength of key agreement (JCE, 8185292) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer) OpenJDK: GSS context use-after-free (JGSS, 8186212) OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606) OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600) OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) OpenJDK: GTK library loading use-after-free (AWT, 8185325) OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284) OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289) OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142) JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)

 https://cve.radiocsirt.org/vuln/suse-su-2018:0630-1 SUSE-SU-2018:0630-1 — Security update for java-1_7_1-ibm 2026-10-02T22:46:25.140190+00:00

Security update for java-1_7_1-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-2579 UBUNTU-CVE-2018-2579 2026-10-02T22:46:25.140216+00:00

Affected: Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).