https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:44:07.912019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06600 cnvd-2015-06600 2026-10-10T08:44:07.918604+00:00 cnvd-2015-06600 https://cve.radiocsirt.org/vuln/euvd-2026-93251 EUVD-2026-93251 2026-10-10T08:44:07.918636+00:00 EUVD-2026-93251 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5235 fkie_cve-2015-5235 2026-10-10T08:44:07.918650+00:00

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

 https://cve.radiocsirt.org/vuln/ghsa-c7wx-r8q7-fmcf GHSA-c7wx-r8q7-fmcf 2026-10-10T08:44:07.918677+00:00

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

 https://cve.radiocsirt.org/vuln/gsd-2015-5235 gsd-2015-5235 2026-10-10T08:44:07.918693+00:00 gsd-2015-5235 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 openSUSE-SU-2024:10316-1 — icedtea-web-javadoc-1.6.2-3.3 on GA media 2026-10-10T08:44:07.918703+00:00

icedtea-web-javadoc-1.6.2-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2015:2457 RHBA-2015:2457 — Red Hat Bug Fix Advisory: icedtea-web bug fix and enhancement update 2026-10-10T08:44:07.918722+00:00

icedtea-web: unexpected permanent authorization of unsigned applets icedtea-web: applet origin spoofing

 https://cve.radiocsirt.org/vuln/suse-su-2015:1682-1 SUSE-SU-2015:1682-1 — Security update for icedtea-web 2026-10-10T08:44:07.918744+00:00

Security update for icedtea-web

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5235 UBUNTU-CVE-2015-5235 2026-10-10T08:44:07.918758+00:00

Affected: Ubuntu:14.04:LTS: icedtea-web

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.