https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:57:10.872664+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03866 bdu:2020-03866 2026-10-03T15:57:11.179851+00:00 bdu:2020-03866 https://cve.radiocsirt.org/vuln/bell-cve-2020-14583 Withdrawn: BELL-CVE-2020-14583 — CVE-2020-14583 does not affect BellSoft software 2026-10-03T15:57:11.179915+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-java-2020-14583 BIT-java-2020-14583 2026-10-03T15:57:11.179937+00:00

Affected: Bitnami: java

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-434 certfr-2020-avi-434 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T15:57:11.179972+00:00 certfr-2020-avi-434 https://cve.radiocsirt.org/vuln/cleanstart-2026-yx62856 CLEANSTART-2026-YX62856 — Security fix for CVE-2020-14583 applied in: openjdk8 8.272.10-r0 2026-10-03T15:57:11.179989+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2020-43727 cnvd-2020-43727 2026-10-03T15:57:11.180011+00:00 cnvd-2020-43727 https://cve.radiocsirt.org/vuln/euvd-2026-189639 EUVD-2026-189639 2026-10-03T15:57:11.180023+00:00 EUVD-2026-189639 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14583 fkie_cve-2020-14583 2026-10-03T15:57:11.180034+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-7cv6-52m7-636w GHSA-7cv6-52m7-636w 2026-10-03T15:57:11.180071+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2020-14583 gsd-2020-14583 2026-10-03T15:57:11.180106+00:00 gsd-2020-14583 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1175-1 openSUSE-SU-2020:1175-1 — Security update for java-11-openjdk 2026-10-03T15:57:11.180118+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:2985 RHSA-2020:2985 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-03T15:57:11.180142+00:00

OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

 https://cve.radiocsirt.org/vuln/suse-su-2020:14482-1 SUSE-SU-2020:14482-1 — Security update for java-1_7_0-ibm 2026-10-03T15:57:11.180169+00:00

Security update for java-1_7_0-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14583 UBUNTU-CVE-2020-14583 2026-10-03T15:57:11.180188+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-8, Ubuntu:20.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-13

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1522 WID-SEC-W-2022-1522 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T15:57:11.180227+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.