https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:48:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-112491 EUVD-2026-112491 https://cve.radiocsirt.org/vuln/euvd-2026-112491 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4540 <p>Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a &#34;triggering event attached to applet.&#34; NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.</p> <p>Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a &#34;triggering event attached to applet.&#34; NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-4540 https://cve.radiocsirt.org/vuln/ghsa-44v2-cg42-mx34 <p>Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a &#34;triggering event attached to applet.&#34; NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.</p> <p>Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a &#34;triggering event attached to applet.&#34; NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.</p> https://cve.radiocsirt.org/vuln/ghsa-44v2-cg42-mx34 https://cve.radiocsirt.org/vuln/gsd-2012-4540 gsd-2012-4540 https://cve.radiocsirt.org/vuln/gsd-2012-4540 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 <p>icedtea-web-javadoc-1.6.2-3.3 on GA media</p> <p>icedtea-web-javadoc-1.6.2-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1434 <p>icedtea-web: IcedTeaScriptableJavaObject:: invoke off-by-one heap-based buffer overflow</p> <p>icedtea-web: IcedTeaScriptableJavaObject:: invoke off-by-one heap-based buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1434