https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:12:46.664429+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02913 bdu:2019-02913 2026-10-02T21:12:46.672873+00:00 bdu:2019-02913 https://cve.radiocsirt.org/vuln/cnvd-2019-27123 cnvd-2019-27123 2026-10-02T21:12:46.672907+00:00 cnvd-2019-27123 https://cve.radiocsirt.org/vuln/euvd-2026-53399 EUVD-2026-53399 2026-10-02T21:12:46.672921+00:00 EUVD-2026-53399 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10181 fkie_cve-2019-10181 2026-10-02T21:12:46.672932+00:00

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.

 https://cve.radiocsirt.org/vuln/ghsa-xv8g-hcfj-ppcw GHSA-xv8g-hcfj-ppcw 2026-10-02T21:12:46.672959+00:00

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.

 https://cve.radiocsirt.org/vuln/gsd-2019-10181 gsd-2019-10181 2026-10-02T21:12:46.672975+00:00 gsd-2019-10181 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1911-1 openSUSE-SU-2019:1911-1 — Security update for icedtea-web 2026-10-02T21:12:46.672985+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/suse-su-2019:2033-1 SUSE-SU-2019:2033-1 — Security update for icedtea-web 2026-10-02T21:12:46.673001+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10181 UBUNTU-CVE-2019-10181 2026-10-02T21:12:46.673016+00:00

Affected: Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.