https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:41:10.990183+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-10735 cnvd-2017-10735 2026-10-15T23:41:11.003593+00:00 cnvd-2017-10735 https://cve.radiocsirt.org/vuln/euvd-2026-72766 EUVD-2026-72766 2026-10-15T23:41:11.003643+00:00 EUVD-2026-72766 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3207 fkie_cve-2017-3207 2026-10-15T23:41:11.003681+00:00

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.

 https://cve.radiocsirt.org/vuln/ghsa-9258-4rxh-qw5j GHSA-9258-4rxh-qw5j 2026-10-15T23:41:11.003742+00:00

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.

 https://cve.radiocsirt.org/vuln/gsd-2017-3207 gsd-2017-3207 2026-10-15T23:41:11.003776+00:00 gsd-2017-3207