https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:49:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02868 bdu:2019-02868 https://cve.radiocsirt.org/vuln/bdu:2019-02868 https://cve.radiocsirt.org/vuln/cnvd-2019-42748 cnvd-2019-42748 https://cve.radiocsirt.org/vuln/cnvd-2019-42748 https://cve.radiocsirt.org/vuln/euvd-2026-53428 EUVD-2026-53428 https://cve.radiocsirt.org/vuln/euvd-2026-53428 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10185 <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10185 https://cve.radiocsirt.org/vuln/ghsa-3q3x-68j9-f9vv <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> https://cve.radiocsirt.org/vuln/ghsa-3q3x-68j9-f9vv https://cve.radiocsirt.org/vuln/gsd-2019-10185 gsd-2019-10185 https://cve.radiocsirt.org/vuln/gsd-2019-10185 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1911-1 <p>Security update for icedtea-web</p> <p>Security update for icedtea-web</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1911-1 https://cve.radiocsirt.org/vuln/suse-su-2019:2033-1 <p>Security update for icedtea-web</p> <p>Security update for icedtea-web</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2033-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10185 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web</p> <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web</p> <p>It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10185