https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:06:21.756465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02548 bdu:2020-02548 2026-10-02T19:06:22.452942+00:00 bdu:2020-02548 https://cve.radiocsirt.org/vuln/bell-cve-2020-2803 Withdrawn: BELL-CVE-2020-2803 — CVE-2020-2803 does not affect BellSoft software 2026-10-02T19:06:22.453016+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-java-2020-2803 BIT-java-2020-2803 2026-10-02T19:06:22.453040+00:00

Affected: Bitnami: java

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-217 certfr-2020-avi-217 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T19:06:22.453079+00:00 certfr-2020-avi-217 https://cve.radiocsirt.org/vuln/cleanstart-2026-vt86643 CLEANSTART-2026-VT86643 — Security fix for CVE-2020-2803 applied in: openjdk8 8.252.09-r0 2026-10-02T19:06:22.453097+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2020-72707 cnvd-2020-72707 2026-10-02T19:06:22.453121+00:00 cnvd-2020-72707 https://cve.radiocsirt.org/vuln/euvd-2026-189928 EUVD-2026-189928 2026-10-02T19:06:22.453134+00:00 EUVD-2026-189928 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2803 fkie_cve-2020-2803 2026-10-02T19:06:22.453145+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-7q6q-6j5w-jcg9 GHSA-7q6q-6j5w-jcg9 2026-10-02T19:06:22.453173+00:00

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2020-2803 gsd-2020-2803 2026-10-02T19:06:22.453195+00:00 gsd-2020-2803 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0757-1 openSUSE-SU-2020:0757-1 — Security update for java-11-openjdk 2026-10-02T19:06:22.453206+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:1506 RHSA-2020:1506 — Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-10-02T19:06:22.453233+00:00

OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

 https://cve.radiocsirt.org/vuln/suse-su-2020:14391-1 SUSE-SU-2020:14391-1 — Security update for java-1_7_0-ibm 2026-10-02T19:06:22.453271+00:00

Security update for java-1_7_0-ibm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-2803 UBUNTU-CVE-2020-2803 2026-10-02T19:06:22.453292+00:00

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-lts

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1639 WID-SEC-W-2022-1639 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T19:06:22.453326+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.