https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:21:13.430818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2018-2794 Withdrawn: BELL-CVE-2018-2794 — CVE-2018-2794 does not affect BellSoft software 2026-10-02T23:21:13.499335+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2018-avi-188 certfr-2018-avi-188 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T23:21:13.499394+00:00 certfr-2018-avi-188 https://cve.radiocsirt.org/vuln/cnvd-2018-09068 cnvd-2018-09068 2026-10-02T23:21:13.499415+00:00 cnvd-2018-09068 https://cve.radiocsirt.org/vuln/euvd-2026-192141 EUVD-2026-192141 2026-10-02T23:21:13.499428+00:00 EUVD-2026-192141 https://cve.radiocsirt.org/vuln/fkie_cve-2018-2794 fkie_cve-2018-2794 2026-10-02T23:21:13.499439+00:00

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-8hrg-qfqw-3fgp GHSA-8hrg-qfqw-3fgp 2026-10-02T23:21:13.499473+00:00

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2018-2794 gsd-2018-2794 2026-10-02T23:21:13.499494+00:00 gsd-2018-2794 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10871-1 openSUSE-SU-2024:10871-1 — java-11-openjdk-11.0.12.0-3.1 on GA media 2026-10-02T23:21:13.499505+00:00

java-11-openjdk-11.0.12.0-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:1188 RHSA-2018:1188 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-02T23:21:13.499577+00:00

OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

 https://cve.radiocsirt.org/vuln/suse-su-2018:1447-1 SUSE-SU-2018:1447-1 — Security update for java-1_7_1-ibm 2026-10-02T23:21:13.499611+00:00

Security update for java-1_7_1-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-2794 UBUNTU-CVE-2018-2794 2026-10-02T23:21:13.499632+00:00

Affected: Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1375 WID-SEC-W-2023-1375 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T23:21:13.499662+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.