Lucene search
+L

13 matches found

osv_debian
osv_debian
•added 2026/08/03 1:16 a.m.•25 views

DEBIAN-CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

7.5CVSS5.4AI score0.00242EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/03 1:16 a.m.•15 views

CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/08/03 1:16 a.m.•21 views

UBUNTU-CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/03 12:51 a.m.•53 views

EUVD-2026-52031

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/03 12:51 a.m.•80 views

CVE-2026-59643 OpenPGP inline-signature policy failures silently ignored

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS0.00242EPSS
SaveExploits0References2
Mend
Mend
•added 2026/08/03 12:51 a.m.•10 views

CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/08/03 12:51 a.m.•20 views

CVE-2026-59643 OpenPGP inline-signature policy failures silently ignored

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References7
CVE
CVE
•added 2026/08/03 12:51 a.m.•114 views

CVE-2026-59643

CVE-2026-59643 affects Bouncy Castle for Java prior to 1.85 and BC-FJA prior to bcpg-fips 2.0.13, where OpenPGP inline-signature policy failures are silently ignored. This implies that inline-signature policy checks may not be enforced, potentially allowing signatures to bypass policy constraints...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References2Affected Software2
Debian CVE
Debian CVE
•added 2026/08/03 12:51 a.m.•24 views

CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/08/03 12:51 a.m.•23 views

CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•5 views

CVE-2026-59643: Improper Verification of Cryptographic Signature

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

8.7CVSS5.4AI score0.00242EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•39 views

PT-2026-67236

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java FIPS BC-FJA versions prior to bcpg-fips 2.0.13 Description OpenPGP inline-signature policy failures are silently ignored, which may lead to security policy bypasses during...

9.8CVSS6.2AI score0.01065EPSS
SaveExploits2References265
Mend
Mend
•added 2019/02/11 5:00 p.m.•6 views

CVE-2018-15586

Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email...

7.1CVSS0.0144EPSS
SaveExploits1References7
Rows per page
Query Builder