https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:30:53.746387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-112491 EUVD-2026-112491 2026-10-10T14:30:53.751634+00:00 EUVD-2026-112491 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4540 fkie_cve-2012-4540 2026-10-10T14:30:53.751667+00:00

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.

 https://cve.radiocsirt.org/vuln/ghsa-44v2-cg42-mx34 GHSA-44v2-cg42-mx34 2026-10-10T14:30:53.751702+00:00

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.

 https://cve.radiocsirt.org/vuln/gsd-2012-4540 gsd-2012-4540 2026-10-10T14:30:53.751721+00:00 gsd-2012-4540 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 openSUSE-SU-2024:10316-1 — icedtea-web-javadoc-1.6.2-3.3 on GA media 2026-10-10T14:30:53.751733+00:00

icedtea-web-javadoc-1.6.2-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2012:1434 RHSA-2012:1434 — Red Hat Security Advisory: icedtea-web security update 2026-10-10T14:30:53.751752+00:00

icedtea-web: IcedTeaScriptableJavaObject:: invoke off-by-one heap-based buffer overflow