https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:13:31.899157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02629 bdu:2020-02629 2026-10-03T14:13:32.032400+00:00 bdu:2020-02629 https://cve.radiocsirt.org/vuln/bit-java-2020-2778 BIT-java-2020-2778 2026-10-03T14:13:32.032454+00:00

Affected: Bitnami: java

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-217 certfr-2020-avi-217 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T14:13:32.032492+00:00 certfr-2020-avi-217 https://cve.radiocsirt.org/vuln/cnvd-2020-72708 cnvd-2020-72708 2026-10-03T14:13:32.032511+00:00 cnvd-2020-72708 https://cve.radiocsirt.org/vuln/euvd-2026-189986 EUVD-2026-189986 2026-10-03T14:13:32.032524+00:00 EUVD-2026-189986 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2778 fkie_cve-2020-2778 2026-10-03T14:13:32.032536+00:00

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-g7gj-3cvp-r2pf GHSA-g7gj-3cvp-r2pf 2026-10-03T14:13:32.032561+00:00

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2020-2778 gsd-2020-2778 2026-10-03T14:13:32.032580+00:00 gsd-2020-2778 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0757-1 openSUSE-SU-2020:0757-1 — Security update for java-11-openjdk 2026-10-03T14:13:32.032591+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:1517 RHSA-2020:1517 — Red Hat Security Advisory: java-11-openjdk security update 2026-10-03T14:13:32.032614+00:00

OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581) OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424) OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691) OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

 https://cve.radiocsirt.org/vuln/suse-su-2020:1511-1 SUSE-SU-2020:1511-1 — Security update for java-11-openjdk 2026-10-03T14:13:32.032669+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-2778 UBUNTU-CVE-2020-2778 2026-10-03T14:13:32.032691+00:00

Affected: Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-lts

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1639 WID-SEC-W-2022-1639 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T14:13:32.032716+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.