https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:59:20.358706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-348 certfr-2018-avi-348 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T02:59:20.505909+00:00 certfr-2018-avi-348 https://cve.radiocsirt.org/vuln/cleanstart-2026-af97379 CLEANSTART-2026-AF97379 — Security fix for CVE-2018-2952 applied in: openjdk8 8.181.13-r0 2026-10-03T02:59:20.505966+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-191736 EUVD-2026-191736 2026-10-03T02:59:20.505998+00:00 EUVD-2026-191736 https://cve.radiocsirt.org/vuln/fkie_cve-2018-2952 fkie_cve-2018-2952 2026-10-03T02:59:20.506012+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/ghsa-pvp8-49wp-gw4c GHSA-pvp8-49wp-gw4c 2026-10-03T02:59:20.506038+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/gsd-2018-2952 gsd-2018-2952 2026-10-03T02:59:20.506059+00:00 gsd-2018-2952 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10871-1 openSUSE-SU-2024:10871-1 — java-11-openjdk-11.0.12.0-3.1 on GA media 2026-10-03T02:59:20.506070+00:00

java-11-openjdk-11.0.12.0-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:2241 RHSA-2018:2241 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-03T02:59:20.506139+00:00

OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)

 https://cve.radiocsirt.org/vuln/suse-su-2018:2083-1 SUSE-SU-2018:2083-1 — Security update for java-10-openjdk 2026-10-03T02:59:20.506155+00:00

Security update for java-10-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-2952 UBUNTU-CVE-2018-2952 2026-10-03T02:59:20.506171+00:00

Affected: Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1308 WID-SEC-W-2023-1308 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T02:59:20.506198+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.