https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:17:23.549812+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-188 certfr-2018-avi-188 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T07:17:23.604349+00:00 certfr-2018-avi-188 https://cve.radiocsirt.org/vuln/cnvd-2018-09069 cnvd-2018-09069 2026-10-03T07:17:23.604407+00:00 cnvd-2018-09069 https://cve.radiocsirt.org/vuln/euvd-2026-192137 EUVD-2026-192137 2026-10-03T07:17:23.604423+00:00 EUVD-2026-192137 https://cve.radiocsirt.org/vuln/fkie_cve-2018-2800 fkie_cve-2018-2800 2026-10-03T07:17:23.604434+00:00

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-pm9w-699m-qvpr GHSA-pm9w-699m-qvpr 2026-10-03T07:17:23.604469+00:00

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2018-2800 gsd-2018-2800 2026-10-03T07:17:23.604489+00:00 gsd-2018-2800 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 openSUSE-SU-2024:10876-1 — java-1_8_0-openjdk-1.8.0.302-2.2 on GA media 2026-10-03T07:17:23.604500+00:00

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:1188 RHSA-2018:1188 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-03T07:17:23.604624+00:00

OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

 https://cve.radiocsirt.org/vuln/suse-su-2018:1447-1 SUSE-SU-2018:1447-1 — Security update for java-1_7_1-ibm 2026-10-03T07:17:23.604659+00:00

Security update for java-1_7_1-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-2800 UBUNTU-CVE-2018-2800 2026-10-03T07:17:23.604681+00:00

Affected: Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1375 WID-SEC-W-2023-1375 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T07:17:23.604708+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.