Lucene search
+L

102818 matches found

Snyk
Snyk
•added 2026/08/03 5:54 a.m.•15 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•17 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•19 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15 is a package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5. Affected versions of this package are vulnerable to Improper Validation of Integrity...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•18 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block cipher, where the KDF is seeded only from the ECDH shared secret and split into a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•20 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block cipher, where the KDF is seeded only from the ECDH shared secret and split into a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•16 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block cipher, where the KDF is seeded only from the ECDH shared secret and split into a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•15 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Improper...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•16 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•17 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block cipher, where the KDF is seeded only from the ECDH shared secret and split into a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•21 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value enabling MAC forgery, in the IESEngine class when initialized through the 4-argument init without a block cipher, where the KDF is seeded only from the ECDH shared secret and split into a...

8.7CVSS7.2AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•18 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes comparison offsets as length - hash.length - 2, so its two comparison loops jointly...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•36 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path compute...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•19 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•20 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Improper...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•18 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes comparison offsets as length - hash.length - 2, so its two comparison loops jointly...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•16 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes comparison offsets as length - hash.length - 2, so its two comparison loops jointly...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•18 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk12 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•20 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes comparison offsets as length - hash.length - 2, so its two comparison loops jointly...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•21 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:54 a.m.•20 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the verifySignature method of RSADigestSigner, whose legacy NULL-omitted DigestInfo path computes comparison offsets as length - hash.length - 2, so its two comparison loops jointly...

8.7CVSS7.2AI score0.00171EPSS
SaveExploits0References2
Rows per page
Query Builder