Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bouncycastle vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote malicious...
Openssl OpensslOracle Openjdk 1.7.0Oracle Openjdk 1.6.0Polarssl Polarssl 0.14.2Polarssl Polarssl 0.11.0Polarssl Polarssl 1.0.0Polarssl Polarssl 0.13.1Polarssl Polarssl 1.1.3Polarssl Polarssl 0.12.1Polarssl Polarssl 0.99Polarssl Polarssl 0.11.1Polarssl Polarssl 1.1.4Polarssl Polarssl 0.14.0Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.2Polarssl Polarssl 0.14.3Polarssl Polarssl 1.1.0Polarssl Polarssl 0.10.1Polarssl Polarssl 0.12.0Polarssl Polarssl 0.10.0
4
CVSSv2
CVE-2013-1624
The TLS implementation in the Bouncy Castle Java library prior to 1.48 and C# library prior to 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote malicious users to c...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.12Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.11Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.20Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.17Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.04Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.03Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.08Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.07Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.06Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.16Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.13Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.23Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.24Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.32Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.31Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.43Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.44Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.02Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.01Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.05Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.19Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.14
10
CVSSv2
CVE-2007-6721
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package prior to 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.31Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.30Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.29Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.22Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.21Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.14Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.13Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.05Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.04Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.33Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.32Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.23Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.24Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.16Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.15Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.08Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.07Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.06Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.36Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.28Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.27Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.20
NA
CVE-2024-30171
bouncycastle: CVE-2024-29857 CVE-2024-30171 CVE-2024-30172 CVE-2024-34447
NA
CVE-2024-29857
bouncycastle: CVE-2024-29857 CVE-2024-30171 CVE-2024-30172 CVE-2024-34447
NA
CVE-2024-30172
bouncycastle: CVE-2024-29857 CVE-2024-30171 CVE-2024-30172 CVE-2024-34447
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377CVE-2024-20859CVE-2023-49606injectarbitrary CVE-2024-33788CVE-2024-30973IDORCVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook