https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 07:45:30 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-06599 cnvd-2015-06599 https://cve.radiocsirt.org/vuln/cnvd-2015-06599 https://cve.radiocsirt.org/vuln/euvd-2026-93248 EUVD-2026-93248 https://cve.radiocsirt.org/vuln/euvd-2026-93248 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5234 <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5234 https://cve.radiocsirt.org/vuln/ghsa-vjh2-cm2h-354g <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> https://cve.radiocsirt.org/vuln/ghsa-vjh2-cm2h-354g https://cve.radiocsirt.org/vuln/gsd-2015-5234 gsd-2015-5234 https://cve.radiocsirt.org/vuln/gsd-2015-5234 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 <p>icedtea-web-javadoc-1.6.2-3.3 on GA media</p> <p>icedtea-web-javadoc-1.6.2-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10316-1 https://cve.radiocsirt.org/vuln/rhba-2015:2457 <p>icedtea-web: unexpected permanent authorization of unsigned applets icedtea-web: applet origin spoofing</p> <p>icedtea-web: unexpected permanent authorization of unsigned applets icedtea-web: applet origin spoofing</p> https://cve.radiocsirt.org/vuln/rhba-2015:2457 https://cve.radiocsirt.org/vuln/suse-su-2015:1682-1 <p>Security update for icedtea-web</p> <p>Security update for icedtea-web</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1682-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5234 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: icedtea-web</p> <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: icedtea-web</p> <p>IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5234