https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:07:11.498016+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02868 bdu:2019-02868 2026-10-03T01:07:11.660053+00:00 bdu:2019-02868 https://cve.radiocsirt.org/vuln/cnvd-2019-42748 cnvd-2019-42748 2026-10-03T01:07:11.660092+00:00 cnvd-2019-42748 https://cve.radiocsirt.org/vuln/euvd-2026-53428 EUVD-2026-53428 2026-10-03T01:07:11.660107+00:00 EUVD-2026-53428 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10185 fkie_cve-2019-10185 2026-10-03T01:07:11.660119+00:00

It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.

 https://cve.radiocsirt.org/vuln/ghsa-3q3x-68j9-f9vv GHSA-3q3x-68j9-f9vv 2026-10-03T01:07:11.660148+00:00

It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.

 https://cve.radiocsirt.org/vuln/gsd-2019-10185 gsd-2019-10185 2026-10-03T01:07:11.660163+00:00 gsd-2019-10185 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1911-1 openSUSE-SU-2019:1911-1 — Security update for icedtea-web 2026-10-03T01:07:11.660173+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/suse-su-2019:2033-1 SUSE-SU-2019:2033-1 — Security update for icedtea-web 2026-10-03T01:07:11.660192+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10185 UBUNTU-CVE-2019-10185 2026-10-03T01:07:11.660206+00:00

Affected: Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web

It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.