https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:07:48.499074+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-00250 bdu:2017-00250 2026-10-02T22:07:48.651990+00:00 bdu:2017-00250 https://cve.radiocsirt.org/vuln/certfr-2017-avi-017 certfr-2017-avi-017 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Java SE</span>. Certaines d'entre elles… 2026-10-02T22:07:48.652034+00:00 certfr-2017-avi-017 https://cve.radiocsirt.org/vuln/cnvd-2017-01772 cnvd-2017-01772 2026-10-02T22:07:48.652054+00:00 cnvd-2017-01772 https://cve.radiocsirt.org/vuln/euvd-2026-194522 EUVD-2026-194522 2026-10-02T22:07:48.652067+00:00 EUVD-2026-194522 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5552 fkie_cve-2016-5552 2026-10-02T22:07:48.652078+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).

 https://cve.radiocsirt.org/vuln/ghsa-c62w-9mvr-73gf GHSA-c62w-9mvr-73gf 2026-10-02T22:07:48.652110+00:00

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).

 https://cve.radiocsirt.org/vuln/gsd-2016-5552 gsd-2016-5552 2026-10-02T22:07:48.652130+00:00 gsd-2016-5552 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 openSUSE-SU-2024:10876-1 — java-1_8_0-openjdk-1.8.0.302-2.2 on GA media 2026-10-02T22:07:48.652140+00:00

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2017:0175 RHSA-2017:0175 — Red Hat Security Advisory: java-1.8.0-oracle security update 2026-10-02T22:07:48.652261+00:00

OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714) OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705) OpenJDK: DSA implementation timing attack (Libraries, 8168728) OpenJDK: ECDSA implementation timing attack (Libraries, 8168724) OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223) JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934) OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802) OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743) OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988) JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment) OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147) JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344) OpenJDK: insecure class construction (Hotspot, 8167104)

 https://cve.radiocsirt.org/vuln/suse-su-2017:0346-1 SUSE-SU-2017:0346-1 — Security update for java-1_8_0-openjdk 2026-10-02T22:07:48.652299+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5552 UBUNTU-CVE-2016-5552 2026-10-02T22:07:48.652321+00:00

Affected: Ubuntu:14.04:LTS: openjdk-6, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: openjdk-8

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).