Denial Of Service (DoS)

org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...

CVE-2025-9566 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, elasticsearch-fips, celeborn, strimzi-kafka-operator, logstash, apache-activemq-artemis, zipkin, kserve-modelmesh, sonarqube, wavefront-proxy, apache-hop, opensearch, wildfly, elasticsearch, infinispan, apicurio-registry, kayenta, seata, keycloak,...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...

CLSA-2025-1757148562 Update of kernel

Rebased FIPS patches to 5.14.0-570.39.1...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: camunda-zeebe, elasticsearch-fips, celeborn, strimzi-kafka-operator, logstash, apache-activemq-artemis, zipkin, kserve-modelmesh, sonarqube, wavefront-proxy, cassandra-reaper, apache-hop, opensearch, wildfly, elasticsearch, infinispan, apicurio-registry, seata,...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, gitlab-rails-ce, opensearch-dashboards-fips...

GHSA-95M3-7Q98-8XR5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, gitlab-rails-ce, opensearch-dashboards-fips...

CVE-2025-9287 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, gitlab-rails-ce, opensearch-dashboards-fips...

Linux Distros Unpatched Vulnerability : CVE-2022-45146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue ...

Ubuntu: Security Advisory (USN-7726-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-7775 Memory overflow vulnerability leading to Remote...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: trivy-fips, mattermost-fips, nsc, chainctl, gitleaks, filebrowser, grype-db, xeol-fips, opentofu-fips, nuclei, packer, syft-fips, envoy-gateway-fips, trufflehog-fips, vcluster-fips, rancher-fleet-fips, gotenberg, opentofu, prometheus-podman-exporter-fips, drone-fips,...

CVE-2025-54988 vulnerabilities

Vulnerabilities for packages: elasticsearch, opensearch, elasticsearch-fips...

GHSA-P72G-PV48-7W9X vulnerabilities

Vulnerabilities for packages: elasticsearch, opensearch, elasticsearch-fips...

CVE-2025-9092 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-V6CF-MV9H-C8MC vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All API modules. This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...