net.sf.robocode/robocode.host vulnerabilities

Latest net.sf.robocode/robocode.host CVEs

Newest publication first

1. CVE-2019-10648 Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction

   Published 2019-03-30

   Critical·CVSS 9.8 EPSS 2.3%

   Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.