https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:34:04.456615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03469 bdu:2023-03469 2026-10-04T01:34:04.506369+00:00 bdu:2023-03469 https://cve.radiocsirt.org/vuln/certfr-2019-avi-340 certfr-2019-avi-340 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé… 2026-10-04T01:34:04.506424+00:00 certfr-2019-avi-340 https://cve.radiocsirt.org/vuln/cleanstart-2026-tm97973 CLEANSTART-2026-TM97973 — Security fix for CVE-2019-2745 applied in: openjdk8 8.222.10-r0 2026-10-04T01:34:04.506443+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2019-26747 cnvd-2019-26747 2026-10-04T01:34:04.506475+00:00 cnvd-2019-26747 https://cve.radiocsirt.org/vuln/euvd-2026-190679 EUVD-2026-190679 2026-10-04T01:34:04.506488+00:00 EUVD-2026-190679 https://cve.radiocsirt.org/vuln/fkie_cve-2019-2745 fkie_cve-2019-2745 2026-10-04T01:34:04.506499+00:00

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-ff2w-wwj3-c5m5 GHSA-ff2w-wwj3-c5m5 2026-10-04T01:34:04.506525+00:00

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2019-2745 gsd-2019-2745 2026-10-04T01:34:04.506545+00:00 gsd-2019-2745 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1912-1 openSUSE-SU-2019:1912-1 — Security update for java-1_8_0-openjdk 2026-10-04T01:34:04.506556+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2019:1811 RHSA-2019:1811 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-04T01:34:04.506579+00:00

OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) OpenJDK: Missing URL format validation (Networking, 8221518) OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

 https://cve.radiocsirt.org/vuln/suse-su-2019:2002-1 SUSE-SU-2019:2002-1 — Security update for java-11-openjdk 2026-10-04T01:34:04.506605+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-2745 UBUNTU-CVE-2019-2745 2026-10-04T01:34:04.506625+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0149 WID-SEC-W-2025-0149 — Oracle Java SE: Mehrere Schwachstellen 2026-10-04T01:34:04.506651+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.