https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:28:05.600641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02633 bdu:2020-02633 2026-10-03T04:28:05.817979+00:00 bdu:2020-02633 https://cve.radiocsirt.org/vuln/bit-java-2020-2816 BIT-java-2020-2816 2026-10-03T04:28:05.818027+00:00

Affected: Bitnami: java

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-217 certfr-2020-avi-217 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T04:28:05.818065+00:00 certfr-2020-avi-217 https://cve.radiocsirt.org/vuln/euvd-2026-189859 EUVD-2026-189859 2026-10-03T04:28:05.818084+00:00 EUVD-2026-189859 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2816 fkie_cve-2020-2816 2026-10-03T04:28:05.818095+00:00

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

 https://cve.radiocsirt.org/vuln/ghsa-wq43-mwf7-pm7c GHSA-wq43-mwf7-pm7c 2026-10-03T04:28:05.818119+00:00

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

 https://cve.radiocsirt.org/vuln/gsd-2020-2816 gsd-2020-2816 2026-10-03T04:28:05.818137+00:00 gsd-2020-2816 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0757-1 openSUSE-SU-2020:0757-1 — Security update for java-11-openjdk 2026-10-03T04:28:05.818148+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/rhsa-2020:1517 RHSA-2020:1517 — Red Hat Security Advisory: java-11-openjdk security update 2026-10-03T04:28:05.818170+00:00

OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581) OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424) OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691) OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

 https://cve.radiocsirt.org/vuln/suse-su-2020:1511-1 SUSE-SU-2020:1511-1 — Security update for java-11-openjdk 2026-10-03T04:28:05.818206+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-2816 UBUNTU-CVE-2020-2816 2026-10-03T04:28:05.818226+00:00

Affected: Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-lts

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1639 WID-SEC-W-2022-1639 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T04:28:05.818250+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.