Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bouncycastle legion-of-the-bouncy-castle-java-crytography-api vulnerabilities and exploits

(subscribe to this query)
356
VMScore
CVE-2013-1624
The TLS implementation in the Bouncy Castle Java library prior to 1.48 and C# library prior to 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote malicious users to c...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.12Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.11Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.20Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.17Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.04Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.03Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.08Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.07Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.06Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.16Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.13Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.23Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.24Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.32Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.31Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.43Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.44Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.02Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.01Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.05Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.19Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.14
890
VMScore
CVE-2007-6721
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package prior to 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.31Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.30Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.29Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.22Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.21Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.14Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.13Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.05Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.04Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.33Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.32Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.23Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.24Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.16Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.15Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.08Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.07Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.06Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.36Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.28Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.27Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.20
471
VMScore
CVE-2017-13098
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a ...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api
446
VMScore
CVE-2016-1000338
In Bouncy Castle JCE Provider version 1.55 and previous versions the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow ...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api
517
VMScore
CVE-2016-1000344
In the Bouncy Castle JCE Provider version 1.55 and previous versions the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api
517
VMScore
CVE-2016-1000352
In the Bouncy Castle JCE Provider version 1.55 and previous versions the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api
384
VMScore
CVE-2016-1000345
In the Bouncy Castle JCE Provider version 1.55 and previous versions the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryptio...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiDebian Debian Linux 8.0
384
VMScore
CVE-2016-1000346
In the Bouncy Castle JCE Provider version 1.55 and previous versions the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of rel...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiDebian Debian Linux 8.0
320
VMScore
CVE-2018-5382
The default BKS keystore use an HMAC that is only 16 bits long, which can allow an malicious user to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore gener...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiRedhat Satellite 6.4Redhat Satellite Capsule 6.4
383
VMScore
CVE-2016-2427
The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for malicious users to defeat a cryptographic protection mechanism and discover an authentication key via a crafted applicati...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.54Google Android 5.1.0Google Android 6.0.1Google Android 6.0Google Android 5.0.1Google Android 5.0Google Android 5.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook