https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:40:40.613234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:0005 ALSA-2023:0005 — Important: bcel security update 2026-10-03T07:40:40.910509+00:00

Affected: AlmaLinux:9: bcel

The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).

Security Fix(es):

* Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-02279 bdu:2024-02279 2026-10-03T07:40:40.910572+00:00 bdu:2024-02279 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 certfr-2023-avi-0034 — De multiples vulnérabilités ont été découvertes dans les produits Oracle. Certaines d'entre elles permettent à un attaq… 2026-10-03T07:40:40.910589+00:00 certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/euvd-2026-19611 EUVD-2026-19611 2026-10-03T07:40:40.910616+00:00 EUVD-2026-19611 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42920 fkie_cve-2022-42920 2026-10-03T07:40:40.910627+00:00

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.

 https://cve.radiocsirt.org/vuln/ghsa-97xg-phpr-rg8q GHSA-97xg-phpr-rg8q — Apache Commons BCEL vulnerable to out-of-bounds write 2026-10-03T07:40:40.910651+00:00

Affected: Maven: org.apache.bcel:bcel

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.

 https://cve.radiocsirt.org/vuln/gsd-2022-42920 gsd-2022-42920 2026-10-03T07:40:40.910672+00:00 gsd-2022-42920 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12498-1 openSUSE-SU-2024:12498-1 — bcel5_3-5.3-21.1 on GA media 2026-10-03T07:40:40.910684+00:00

bcel5_3-5.3-21.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:8959 RHSA-2022:8959 — Red Hat Security Advisory: rh-maven36-bcel security update 2026-10-03T07:40:40.910700+00:00

Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing

 https://cve.radiocsirt.org/vuln/suse-su-2022:4331-1 SUSE-SU-2022:4331-1 — Security update for bcel 2026-10-03T07:40:40.910717+00:00

Security update for bcel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42920 UBUNTU-CVE-2022-42920 2026-10-03T07:40:40.910731+00:00

Affected: Ubuntu:Pro:16.04:LTS: bcel, Ubuntu:Pro:18.04:LTS: bcel, Ubuntu:Pro:20.04:LTS: bcel, Ubuntu:22.04:LTS: bcel

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1961 WID-SEC-W-2022-1961 — Apache Commons: Schwachstelle ermöglicht Codeausführung 2026-10-03T07:40:40.910756+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um beliebigen Programmcode auszuführen.