https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:44:58.559802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06599 cnvd-2015-06599 2026-10-10T04:44:58.566399+00:00 cnvd-2015-06599 https://cve.radiocsirt.org/vuln/euvd-2026-93248 EUVD-2026-93248 2026-10-10T04:44:58.566435+00:00 EUVD-2026-93248 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5234 fkie_cve-2015-5234 2026-10-10T04:44:58.566455+00:00

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.

 https://cve.radiocsirt.org/vuln/ghsa-vjh2-cm2h-354g GHSA-vjh2-cm2h-354g 2026-10-10T04:44:58.566492+00:00

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.

 https://cve.radiocsirt.org/vuln/gsd-2015-5234 gsd-2015-5234 2026-10-10T04:44:58.566509+00:00 gsd-2015-5234 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 openSUSE-SU-2024:10316-1 — icedtea-web-javadoc-1.6.2-3.3 on GA media 2026-10-10T04:44:58.566519+00:00

icedtea-web-javadoc-1.6.2-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2015:2457 RHBA-2015:2457 — Red Hat Bug Fix Advisory: icedtea-web bug fix and enhancement update 2026-10-10T04:44:58.566540+00:00

icedtea-web: unexpected permanent authorization of unsigned applets icedtea-web: applet origin spoofing

 https://cve.radiocsirt.org/vuln/suse-su-2015:1682-1 SUSE-SU-2015:1682-1 — Security update for icedtea-web 2026-10-10T04:44:58.566556+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5234 UBUNTU-CVE-2015-5234 2026-10-10T04:44:58.566569+00:00

Affected: Ubuntu:14.04:LTS: icedtea-web

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.