https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:17:20.751429+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2018-2627 Withdrawn: BELL-CVE-2018-2627 — CVE-2018-2627 does not affect BellSoft software 2026-10-03T05:17:20.762307+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2018-avi-036 certfr-2018-avi-036 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T05:17:20.762365+00:00 certfr-2018-avi-036 https://cve.radiocsirt.org/vuln/cnvd-2018-02256 cnvd-2018-02256 2026-10-03T05:17:20.762396+00:00 cnvd-2018-02256 https://cve.radiocsirt.org/vuln/euvd-2026-237871 EUVD-2026-237871 2026-10-03T05:17:20.762419+00:00 EUVD-2026-237871 https://cve.radiocsirt.org/vuln/fkie_cve-2018-2627 fkie_cve-2018-2627 2026-10-03T05:17:20.762439+00:00

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-x2mp-gcv7-74m4 GHSA-x2mp-gcv7-74m4 2026-10-03T05:17:20.762490+00:00

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2018-2627 gsd-2018-2627 2026-10-03T05:17:20.762524+00:00 gsd-2018-2627 https://cve.radiocsirt.org/vuln/rhsa-2018:0099 RHSA-2018:0099 — Red Hat Security Advisory: java-1.8.0-oracle security update 2026-10-03T05:17:20.762544+00:00

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525) JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX) OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962) OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449) OpenJDK: DnsClient missing source port randomization (JNDI, 8182125) OpenJDK: loading of classes from untrusted locations (I18n, 8182601) OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387) OpenJDK: insufficient strength of key agreement (JCE, 8185292) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer) OpenJDK: GSS context use-after-free (JGSS, 8186212) OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606) OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600) OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) OpenJDK: GTK library loading use-after-free (AWT, 8185325) OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284) OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289) OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142) JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)