Lucene search
+L

65246 matches found

Mend
Mend
•added 2026/08/03 12:44 a.m.•6 views

CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS6.1AI score0.00493EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/08/03 12:42 a.m.•83 views

CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS0.00337EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/03 12:42 a.m.•19 views

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.5AI score0.00337EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/08/03 12:42 a.m.•19 views

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.5AI score0.00337EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/08/03 12:42 a.m.•21 views

EUVD-2026-52024

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.4AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/03 12:42 a.m.•268 views

CVE-2026-59650

Bouncy Castle for Java up to 1.84 (and Java LTS up to 2.73.11) is affected by CVE-2026-59650: MTI/A0 DH key exchange exponentiates an unvalidated peer value. This can impact confidentiality and integrity as described in the CVE, with overall severity listed as CRITICAL (CVSS 9.3). The issue is fi...

9.3CVSS5.5AI score0.00337EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2026/08/03 12:42 a.m.•17 views

CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.5AI score0.00337EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/03 12:42 a.m.•15 views

CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.4AI score
SaveExploits0References8
Mend
Mend
•added 2026/08/03 12:42 a.m.•4 views

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

9.3CVSS5.5AI score0.00337EPSS
SaveExploits0References9
Mend
Mend
•added 2026/08/03 12:41 a.m.•5 views

CVE-2026-59651

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.5CVSS5.4AI score0.00242EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2026/08/03 12:41 a.m.•20 views

CVE-2026-59651

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.5CVSS5.4AI score0.00242EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/08/03 12:41 a.m.•18 views

CVE-2026-59651

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00242EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/08/03 12:41 a.m.•25 views

EUVD-2026-52023

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00242EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/03 12:41 a.m.•128 views

CVE-2026-59651

CVE-2026-59651 affects Bouncy Castle for Java before version 1.85, and BC Java LTS before 2.73.12. The issue is that the BKS keystore may accept a legacy version using a 16‑bit integrity MAC key, exposing potential integrity verification weaknesses. The CVSS score is 7.1 (HIGH) with network attac...

7.5CVSS5.4AI score0.00242EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2026/08/03 12:41 a.m.•20 views

CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00242EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/03 12:41 a.m.•18 views

CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/03 12:41 a.m.•76 views

CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00242EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/03 12:39 a.m.•17 views

CVE-2026-59652 LDAP filter injection in legacy jdk1.4 LDAPStoreHelper

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

6.9CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/03 12:39 a.m.•73 views

CVE-2026-59652 LDAP filter injection in legacy jdk1.4 LDAPStoreHelper

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

6.9CVSS0.00295EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/03 12:39 a.m.•21 views

EUVD-2026-52022

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

6.9CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Rows per page
Query Builder