79 matches found
OESA-2026-4246 bouncycastle security update
The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: In Bouncy Castle for Java before 1.86, the streaming CMS...
OESA-2026-4245 bouncycastle security update
The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: In Bouncy Castle for Java before 1.86, the streaming CMS...
OESA-2026-4244 bouncycastle security update
The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: In Bouncy Castle for Java before 1.86, the streaming CMS...
OESA-2026-4243 bouncycastle security update
The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: In Bouncy Castle for Java before 1.86, the streaming CMS...
SUSE CVE-2026-71888
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...
DEBIAN-CVE-2026-71888
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...
CVE-2026-71888
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...
UBUNTU-CVE-2026-71888
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...
EUVD-2026-91991
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...
PT-2026-102037
ghsa-vp29-5652-4fw9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Improper Validation of Integrity Check Value
Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the getContentStream method of RecipientInformation, which, when authenticated attributes are present, authenticates only the DER-encoded authAttrs and never checks the computed content...
CVE-2016-5652
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/519 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/519 2026-08-06 01:00:05+00:00| seen| https://t.me/KaitNews/519 2026-08-07 00:59:27+00:00| seen| https://t.me/KaitNews/519...
GHSA-6H2Q-2X4R-5652 vulnerabilities
Vulnerabilities for packages: firefox-esr...
MINI-5652-GG8Q-PR24
Bulletin has no description...
CVE-2023-5652
creationtimestamp| type| source ---|---|--- 2026-03-12 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3jmx52q...
CGA-5652-5HPV-VCR3
Bulletin has no description...
CVE-2025-5652
creationtimestamp| type| source ---|---|--- 2025-06-05 11:45:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquak45u2l42...
CVE-2025-5652
PHPGurukul Complaint Management System 2.0 contains a SQL injection vulnerability in the /admin/between-date-complaintreport.php file, triggered by unsafely handling the fromdate/todate parameters. Attackers can remotely exploit this flaw; exploits have been disclosed publicly per multiple source...
CVE-2025-5652 PHPGurukul Complaint Management System between-date-complaintreport.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the...
CVE-2025-5652 PHPGurukul Complaint Management System between-date-complaintreport.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the...