100703 matches found
CVE-2026-12802 CMS AuthEnvelopedData fails to enforce tag-length on decryption
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
EUVD-2026-52091
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
CVE-2026-18582
Summary: CVE-2026-18582 affects mz-automation libiec61850 up to 1.6.1, specifically the Reporting_RCBWriteAccessHandler in src/iec61850/server/mms_mapping/reporting.c of the Report Sending Path Handler. The vulnerability allows freeing memory not on the heap (memory disclosure/ corruption) and is...
CVE-2026-59641
CVE-2026-59641 affects Bouncy Castle for Java: before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation; also affects Java LTS before 2.73.12 and Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.x), 2.0.7 (2.0.x), and 2.1.7 (2.1.x). CVSS v4.0 base scor...
CVE-2026-59641 S/MIME validator trusts signer-asserted signingTime for path validation
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcmail-fips and bcjmail-fips 1.0.7 1.0.X series, 2.0.7 2.0.X series and...
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...
CVE-2026-59648 OpenPGP Argon2 S2K honours attacker-chosen memory and passes
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
CVE-2026-59648
CVE-2026-59648 affects Bouncy Castle for Java: OpenPGP Argon2 S2K accepts attacker-chosen memory parameters. Vulnerable in BC Java before 1.85, in BC Java LTS before 2.73.12, and in BC Java FIPS (bcpg-fips) before 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). Per NVD, CVSSv4.0 base score 6....
CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
Hanwha Vision Cameras Improper Input Validation (CVE-2024-54011)
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...
The vulnerability of the quote() function in the shell-quote npm package, which allows a hacker to execute arbitrary code.
The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-67673
A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...
PT-2026-67241
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
PT-2026-67494
Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 2.10.0 Description Authorization handling for Parameter Context validation requests allows clients with read access to submit proposed Parameter values. These proposed values override the current...
Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...
Linux Distros Unpatched Vulnerability : CVE-2026-69097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through...