Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:10:13 +0000 certa-2008-avi-578 — Des vulnérabilités concernant la machine virtuelle Java ont été identifiées par Sun. Elles sont actuellement non docume… https://cve.radiocsirt.org/vuln/certa-2008-avi-578 certa-2008-avi-578 https://cve.radiocsirt.org/vuln/certa-2008-avi-578 EUVD-2026-130245 https://cve.radiocsirt.org/vuln/euvd-2026-130245 EUVD-2026-130245 https://cve.radiocsirt.org/vuln/euvd-2026-130245 fkie_cve-2008-5355 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5355 <p>The &#34;Java Update&#34; feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.</p> <p>The &#34;Java Update&#34; feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5355 GHSA-vxv3-8pcw-fwgr https://cve.radiocsirt.org/vuln/ghsa-vxv3-8pcw-fwgr <p>The &#34;Java Update&#34; feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.</p> <p>The &#34;Java Update&#34; feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-vxv3-8pcw-fwgr gsd-2008-5355 https://cve.radiocsirt.org/vuln/gsd-2008-5355 gsd-2008-5355 https://cve.radiocsirt.org/vuln/gsd-2008-5355