https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:43:56.341873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02631 bdu:2020-02631 2026-10-03T00:43:56.912229+00:00 bdu:2020-02631 https://cve.radiocsirt.org/vuln/bell-cve-2020-2800 Withdrawn: BELL-CVE-2020-2800 — CVE-2020-2800 does not affect BellSoft software 2026-10-03T00:43:56.912299+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-java-2020-2800 BIT-java-2020-2800 2026-10-03T00:43:56.912321+00:00

Affected: Bitnami: java

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-217 certfr-2020-avi-217 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T00:43:56.912358+00:00 certfr-2020-avi-217 https://cve.radiocsirt.org/vuln/cleanstart-2026-lh78467 CLEANSTART-2026-LH78467 — Security fix for CVE-2020-2800 applied in: openjdk8 8.252.09-r0 2026-10-03T00:43:56.912375+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-189961 EUVD-2026-189961 2026-10-03T00:43:56.912398+00:00 EUVD-2026-189961 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2800 fkie_cve-2020-2800 2026-10-03T00:43:56.912410+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-359p-jmhp-cvrp GHSA-359p-jmhp-cvrp 2026-10-03T00:43:56.912436+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2020-2800 gsd-2020-2800 2026-10-03T00:43:56.912455+00:00 gsd-2020-2800 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0757-1 openSUSE-SU-2020:0757-1 — Security update for java-11-openjdk 2026-10-03T00:43:56.912467+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:1506 RHSA-2020:1506 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-03T00:43:56.912493+00:00

OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

 https://cve.radiocsirt.org/vuln/suse-su-2020:14391-1 SUSE-SU-2020:14391-1 — Security update for java-1_7_0-ibm 2026-10-03T00:43:56.912529+00:00

Security update for java-1_7_0-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-2800 UBUNTU-CVE-2020-2800 2026-10-03T00:43:56.912547+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-lts

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1639 WID-SEC-W-2022-1639 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T00:43:56.912577+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.