https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:18:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01762 bdu:2019-01762 https://cve.radiocsirt.org/vuln/bdu:2019-01762 https://cve.radiocsirt.org/vuln/certfr-2018-avi-539 certfr-2018-avi-539 https://cve.radiocsirt.org/vuln/certfr-2018-avi-539 https://cve.radiocsirt.org/vuln/cnvd-2018-16484 cnvd-2018-16484 https://cve.radiocsirt.org/vuln/cnvd-2018-16484 https://cve.radiocsirt.org/vuln/euvd-2026-65856 EUVD-2026-65856 https://cve.radiocsirt.org/vuln/euvd-2026-65856 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12539 <p>In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.</p> <p>In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12539 https://cve.radiocsirt.org/vuln/ghsa-8xmg-5xjr-x475 <p>In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.</p> <p>In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.</p> https://cve.radiocsirt.org/vuln/ghsa-8xmg-5xjr-x475 https://cve.radiocsirt.org/vuln/gsd-2018-12539 gsd-2018-12539 https://cve.radiocsirt.org/vuln/gsd-2018-12539 https://cve.radiocsirt.org/vuln/rhsa-2018:2568 <p>OpenSSL: Double-free in DSA code openssl: BN_mod_exp may produce incorrect results on x86_64 openssl: bn_sqrx8x_internal carry bug on x86_64 JDK: DoS in the java.math component JDK: path traversal flaw in the Diagnostic Tooling Framework JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) JDK: privilege escalation via insufficiently restricted access to Attach API</p> <p>OpenSSL: Double-free in DSA code openssl: BN_mod_exp may produce incorrect results on x86_64 openssl: bn_sqrx8x_internal carry bug on x86_64 JDK: DoS in the java.math component JDK: path traversal flaw in the Diagnostic Tooling Framework JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) JDK: privilege escalation via insufficiently restricted access to Attach API</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2568 https://cve.radiocsirt.org/vuln/suse-su-2018:2574-1 <p>Security update for java-1_7_0-ibm</p> <p>Security update for java-1_7_0-ibm</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2574-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0531 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0531