https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:12:11.407093+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03570 bdu:2019-03570 2026-10-02T20:12:11.481009+00:00 bdu:2019-03570 https://cve.radiocsirt.org/vuln/certfr-2019-avi-340 certfr-2019-avi-340 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé… 2026-10-02T20:12:11.481062+00:00 certfr-2019-avi-340 https://cve.radiocsirt.org/vuln/cleanstart-2026-sb73169 CLEANSTART-2026-SB73169 — Security fix for CVE-2019-2786 applied in: openjdk8 8.222.10-r0 2026-10-02T20:12:11.481082+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2019-26754 cnvd-2019-26754 2026-10-02T20:12:11.481113+00:00 cnvd-2019-26754 https://cve.radiocsirt.org/vuln/euvd-2026-190654 EUVD-2026-190654 2026-10-02T20:12:11.481127+00:00 EUVD-2026-190654 https://cve.radiocsirt.org/vuln/fkie_cve-2019-2786 fkie_cve-2019-2786 2026-10-02T20:12:11.481138+00:00

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-fp8v-gg7x-5qrf GHSA-fp8v-gg7x-5qrf 2026-10-02T20:12:11.481166+00:00

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2019-2786 gsd-2019-2786 2026-10-02T20:12:11.481186+00:00 gsd-2019-2786 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1912-1 openSUSE-SU-2019:1912-1 — Security update for java-1_8_0-openjdk 2026-10-02T20:12:11.481197+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2019:1811 RHSA-2019:1811 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-02T20:12:11.481219+00:00

OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) OpenJDK: Missing URL format validation (Networking, 8221518) OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

 https://cve.radiocsirt.org/vuln/suse-su-2019:2002-1 SUSE-SU-2019:2002-1 — Security update for java-11-openjdk 2026-10-02T20:12:11.481245+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-2786 UBUNTU-CVE-2019-2786 2026-10-02T20:12:11.481264+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0149 WID-SEC-W-2025-0149 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T20:12:11.481292+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.