Lucene search
+L

42541 matches found

Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in CMS AuthEnvelopedData recipient processing, where AbstractRecipient and its recipient classes such as JceKeyTransRecipient and BcKeyTransRecipient take the AEAD tag length from the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from ...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from an encoded public key without the RFC 8554 depth cap of 8 enforced only during key...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in CMS AuthEnvelopedData recipient processing, where AbstractRecipient and its recipient classes such as JceKeyTransRecipient and BcKeyTransRecipient take the AEAD tag length from the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from an encoded public key without the RFC 8554 depth cap of 8 enforced only during key...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•13 views

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L fro...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from an...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from an encoded public key without the RFC 8554 depth cap of 8 enforced only during key...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Allocatio...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk15 is a package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5. Affected versions of this package are vulnerable to Allocation of Resources Without...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data ...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Improper...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters fro...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15 is a package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5. Affected versions of this package are vulnerable to Improper Validation of Integrity...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Allocation of Resources Without Limits or Throttling

Overview bouncycastle:bcprov-jdk12 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...

5.3CVSS5.4AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk12 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

8.7CVSS5.5AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•6 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•7 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•8 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•6 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:50 a.m.•11 views

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the toByteArray method of DefiniteLengthInputStream, which allocates new byteintremaining up fron...

8.7CVSS5.5AI score0.00277EPSS
SaveExploits0References2
Total number of security vulnerabilities42541