https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:44:16.093574+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00459 bdu:2020-00459 2026-10-02T18:44:16.156901+00:00 bdu:2020-00459 https://cve.radiocsirt.org/vuln/bit-java-2020-2604 BIT-java-2020-2604 2026-10-02T18:44:16.156964+00:00

Affected: Bitnami: java

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-035 certfr-2020-avi-035 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T18:44:16.157016+00:00 certfr-2020-avi-035 https://cve.radiocsirt.org/vuln/cleanstart-2026-dd93131 CLEANSTART-2026-DD93131 — Security fix for CVE-2020-2604 applied in: openjdk8 8.242.08-r0 2026-10-02T18:44:16.157034+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2020-09692 cnvd-2020-09692 2026-10-02T18:44:16.157056+00:00 cnvd-2020-09692 https://cve.radiocsirt.org/vuln/euvd-2026-189945 EUVD-2026-189945 2026-10-02T18:44:16.157069+00:00 EUVD-2026-189945 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2604 fkie_cve-2020-2604 2026-10-02T18:44:16.157079+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-c9rv-f9qq-jjvf GHSA-c9rv-f9qq-jjvf 2026-10-02T18:44:16.157105+00:00

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java). The supported version that is affected is 19.3.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM Enterprise Edition. Note: GraalVM Enterprise 19.3 and above includes both Java SE 8 and Java SE 11. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2020-2604 gsd-2020-2604 2026-10-02T18:44:16.157124+00:00 gsd-2020-2604 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0113-1 openSUSE-SU-2020:0113-1 — Security update for java-11-openjdk 2026-10-02T18:44:16.157134+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:0157 RHSA-2020:0157 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-02T18:44:16.157155+00:00

OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

 https://cve.radiocsirt.org/vuln/suse-su-2020:0140-1 SUSE-SU-2020:0140-1 — Security update for java-11-openjdk 2026-10-02T18:44:16.157182+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-2604 UBUNTU-CVE-2020-2604 2026-10-02T18:44:16.157200+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-lts

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0234 WID-SEC-W-2023-0234 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T18:44:16.157232+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.