Lucene search
+L

474609 matches found

Snyk
Snyk
added 2026/08/03 3:53 a.m.9 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...

7.1CVSS5.5AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.6 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...

7.1CVSS5.5AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the OnePassSignatures.verify method of OpenPGPMessageInputStream, whose catch PGPSignatureException block for the dataSignature.sanitizekey, policy check contains only a // continue...

8.7CVSS5.8AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.6 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...

7.1CVSS5.5AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.5 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...

7.1CVSS5.5AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.6 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the isEmailConstrained and isURIConstrained methods of PKIXNameConstraintValidator, which compare rfc822Name and URI subjectAltName values with a bare equalsIgnoreCase and do not strip a trailing dot t...

9.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.6 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the isEmailConstrained and isURIConstrained methods of PKIXNameConstraintValidator, which compare rfc822Name and URI subjectAltName values with a bare equalsIgnoreCase and do not strip a trailing dot t...

9.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.6 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

9.3CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.7 views

Improper Certificate Validation

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the isEmailConstrained and isURIConstrained methods of PKIXNameConstraintValidator, which compare rfc822Name and...

9.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.8 views

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection in the parseDN method of the JDK 1.4 LDAPStoreHelper class, which returns the raw DN component that callers concatenate into an LDAP filter of the form attr=value and pass to DirContext.search without the filterEncode...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.6 views

Improper Input Validation

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of...

9.3CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.8 views

LDAP Injection

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to LDAP Injection in the parseDN method of the JDK 1.4 LDAPStoreHelper class, which returns the raw DN component that callers concatenate into an LDAP...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.6 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the isEmailConstrained and isURIConstrained methods of PKIXNameConstraintValidator, which compare rfc822Name and URI subjectAltName values with a bare equalsIgnoreCase and do not strip a trailing dot t...

9.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.8 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the isEmailConstrained and isURIConstrained methods of PKIXNameConstraintValidator, which compare rfc822Name and URI subjectAltName values with a bare equalsIgnoreCase and do not strip a trailing dot t...

9.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 3:16 a.m.5 views

DEBIAN-CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

9.3CVSS5.5AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/03 3:16 a.m.9 views

CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

9.3CVSS0.00203EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 3:16 a.m.5 views

UBUNTU-CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

9.3CVSS5.5AI score0.00203EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/03 2:58 a.m.7 views

EUVD-2026-52140

In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

5.3CVSS5.4AI score0.00294EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/03 2:56 a.m.49 views

CVE-2026-13506

CVE-2026-13506 affects multiple Bouncy Castle for Java lines: Java mainline prior to 1.85; Java LTS prior to 2.73.12; and Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). Root cause is a Lazy ASN.1 sequence that resets the nesting-depth guard, with potential im...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 2:53 a.m.5 views

CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.4AI score0.00157EPSS
SaveExploits0References2
Rows per page
Query Builder