https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:41:20.538192+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-10648 CVE-2019-10648 2026-09-29T09:41:20.856191+00:00

Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

 https://vulnerability.circl.lu/vuln/usn-8385-1 USN-8385-1 — robocode vulnerabilities 2026-09-29T09:41:20.856410+00:00

Affected: Ubuntu:Pro:16.04:LTS: robocode, Ubuntu:Pro:18.04:LTS: robocode, Ubuntu:Pro:20.04:LTS: robocode, Ubuntu:Pro:22.04:LTS: robocode, Ubuntu:Pro:24.04:LTS: robocode, Ubuntu:Pro:26.04:LTS: robocode

It was discovered that Robocode could be tricked into making network requests to attacker-controlled systems. An attacker could possibly use this issue to cause external service interaction, resulting in information disclosure. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-10648)

Lim Sim Yee discovered that Robocode did not properly validate file paths in the CacheCleaner component. An attacker could possibly use this issue to delete arbitrary files. (CVE-2025-14306)

Lim Sim Yee discovered that Robocode did not securely create temporary files in the AutoExtract component. An attacker could possibly use this issue to manipulate temporary files, resulting in arbitrary code execution. (CVE-2025-14307)

Lim Sim Yee discovered that Robocode did not properly validate data lengths in the Buffer class. An attacker could possibly use this issue to trigger an integer overflow, resulting in arbitrary code execution. (CVE-2025-14308)