Lucene search
+L

7 matches found

CVE
CVE
added 2026/08/03 12:53 a.m.69 views

CVE-2026-59642

CVE-2026-59642 affects Bouncy Castle for Java: CMS AuthenticatedData content is not bound to MAC when authAttrs are present. Affected versions include: Java Bouncy Castle before 1.85; Java LTS before 2.73.12; Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.x), 2.0.12 (2.0.x), and 2.1.12 (2.1.x)...

8.7CVSS5.5AI score0.00157EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/03 12:53 a.m.11 views

CVE-2026-59642

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X seri...

8.7CVSS5.4AI score0.00157EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/03 12:53 a.m.6 views

EUVD-2026-52032

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X seri...

8.7CVSS5.5AI score0.00157EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/03 12:53 a.m.9 views

CVE-2026-59642

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X seri...

8.7CVSS5.5AI score0.00157EPSS
SaveExploits0References4Affected Software2
NVD
NVD
added 2022/01/21 7:15 p.m.23 views

CVE-2021-23196

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

9.8CVSS0.00909EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/01/21 6:17 p.m.9 views

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

7.3CVSS8AI score0.00909EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/21 6:17 p.m.25 views

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

7.3CVSS9.8AI score0.00909EPSS
SaveExploits0References1
Rows per page
Query Builder