CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

58335 matches found

OSV•added 2026/08/03 3:16 a.m.•6 views

UBUNTU-CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

5.3CVSS5.4AI score0.00348EPSS

SaveExploits0References4

ATTACKERKB•added 2026/08/03 2:58 a.m.•10 views

CVE-2026-13586

In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

5.3CVSS5.4AI score0.00306EPSS

SaveExploits0References5Affected Software2

Cvelist•added 2026/08/03 2:58 a.m.•56 views

CVE-2026-13586 PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

5.3CVSS0.00306EPSS

SaveExploits0References3

Debian CVE•added 2026/08/03 2:58 a.m.•17 views

CVE-2026-13586

5.3CVSS5.4AI score0.00306EPSS

SaveExploits0

Vulnrichment•added 2026/08/03 2:58 a.m.•8 views

CVE-2026-13586 PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

5.3CVSS5.4AI score0.00306EPSS

SaveExploits0References3

EUVD•added 2026/08/03 2:58 a.m.•10 views

EUVD-2026-52140

5.3CVSS5.4AI score0.00306EPSS

SaveExploits0References3

CVE•added 2026/08/03 2:58 a.m.•93 views

CVE-2026-13586

CVE-2026-13586 affects Bouncy Castle for Java: in versions prior to 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound introduces DoS risk; this also impacts Java LTS before 2.73.12 and BC-FJA before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). The available documents de...

5.3CVSS5.4AI score0.00306EPSS

SaveExploits0References3

OSV•added 2026/08/03 2:58 a.m.•9 views

CVE-2026-13586 PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

5.3CVSS5.4AI score

SaveExploits0References10

OSV•added 2026/08/03 2:56 a.m.•7 views

CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard

In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS5.4AI score

SaveExploits0References9

CVE•added 2026/08/03 2:56 a.m.•104 views

CVE-2026-13506

CVE-2026-13506 affects multiple Bouncy Castle for Java lines: Java mainline prior to 1.85; Java LTS prior to 2.73.12; and Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). Root cause is a Lazy ASN.1 sequence that resets the nesting-depth guard, with potential im...

8.7CVSS5.4AI score0.00277EPSS

SaveExploits0References2

EUVD•added 2026/08/03 2:56 a.m.•13 views

EUVD-2026-52139

8.7CVSS5.4AI score0.00277EPSS

SaveExploits0References2

ATTACKERKB•added 2026/08/03 2:56 a.m.•7 views

CVE-2026-13506

8.7CVSS5.4AI score0.00277EPSS

SaveExploits0References3Affected Software2

Debian CVE•added 2026/08/03 2:56 a.m.•14 views

CVE-2026-13506

8.7CVSS5.4AI score0.00277EPSS

SaveExploits0

Cvelist•added 2026/08/03 2:56 a.m.•77 views

CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard

8.7CVSS0.00277EPSS

SaveExploits0References2

Vulnrichment•added 2026/08/03 2:56 a.m.•9 views

CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard

8.7CVSS5.4AI score0.00277EPSS

SaveExploits0References2

ATTACKERKB•added 2026/08/03 2:55 a.m.•8 views

CVE-2026-12860

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.4AI score0.00184EPSS

SaveExploits0References4Affected Software1

Debian CVE•added 2026/08/03 2:55 a.m.•13 views

CVE-2026-12860

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.4AI score0.00184EPSS

SaveExploits0

Cvelist•added 2026/08/03 2:55 a.m.•58 views

CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS0.00184EPSS

SaveExploits0References2

CVE•added 2026/08/03 2:55 a.m.•98 views

CVE-2026-12860

Affected software: Bouncy Castle for Java (and Java LTS) prior to specific versions. The vulnerability (CVE-2026-12860) concerns RSA PKCS#1 verification skipping the last two hash bytes in the NULL-omitted path. This could impact signature verification correctness. Affected versions: BC Java befo...

8.7CVSS5.4AI score0.00184EPSS

SaveExploits0References2

OSV•added 2026/08/03 2:55 a.m.•7 views

CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.4AI score

SaveExploits0References8

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by