https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:04:25.203229+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03901 bdu:2019-03901 2026-10-02T16:04:25.690680+00:00 bdu:2019-03901 https://cve.radiocsirt.org/vuln/certfr-2019-avi-508 certfr-2019-avi-508 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T16:04:25.690732+00:00 certfr-2019-avi-508 https://cve.radiocsirt.org/vuln/cleanstart-2026-iy49444 Withdrawn: CLEANSTART-2026-IY49444 — Security fixes in openjdk8 8.232.09-r0 2026-10-02T16:04:25.690761+00:00

Withdrawn by the publisher.

Affected: CleanStart: openjdk8

Package openjdk8 version 8.232.09-r0 fixes 17 vulnerabilities: CVE-2019-2933, CVE-2019-2945, CVE-2019-2949, CVE-2019-2958, CVE-2019-2964...

 https://cve.radiocsirt.org/vuln/cnvd-2019-37213 cnvd-2019-37213 2026-10-02T16:04:25.690795+00:00 cnvd-2019-37213 https://cve.radiocsirt.org/vuln/euvd-2026-190528 EUVD-2026-190528 2026-10-02T16:04:25.690809+00:00 EUVD-2026-190528 https://cve.radiocsirt.org/vuln/fkie_cve-2019-2973 fkie_cve-2019-2973 2026-10-02T16:04:25.690820+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/ghsa-x58f-j988-8ppf GHSA-x58f-j988-8ppf 2026-10-02T16:04:25.690847+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/gsd-2019-2973 gsd-2019-2973 2026-10-02T16:04:25.690867+00:00 gsd-2019-2973 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2557-1 openSUSE-SU-2019:2557-1 — Security update for java-11-openjdk 2026-10-02T16:04:25.690878+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2019:3136 RHSA-2019:3136 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-02T16:04:25.690905+00:00

OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

 https://cve.radiocsirt.org/vuln/suse-su-2019:2998-1 SUSE-SU-2019:2998-1 — Security update for java-11-openjdk 2026-10-02T16:04:25.690942+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-2973 UBUNTU-CVE-2019-2973 2026-10-02T16:04:25.690968+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-13

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0524 WID-SEC-W-2023-0524 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T16:04:25.690999+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.