https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:13.257175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-er14083 CLEANSTART-2026-ER14083 — Security fix for CVE-2015-0886 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-re… 2026-10-02T17:29:13.262683+00:00

Affected: CleanStart: cassandra-reaper-fips

CVE-2015-0886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2015-01394 cnvd-2015-01394 2026-10-02T17:29:13.262730+00:00 cnvd-2015-01394 https://cve.radiocsirt.org/vuln/euvd-2026-89835 EUVD-2026-89835 2026-10-02T17:29:13.262746+00:00 EUVD-2026-89835 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0886 fkie_cve-2015-0886 2026-10-02T17:29:13.262758+00:00

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

 https://cve.radiocsirt.org/vuln/ghsa-9h6p-92jq-888x GHSA-9h6p-92jq-888x — Integer Overflow or Wraparound in JBCrypt 2026-10-02T17:29:13.262778+00:00

Affected: Maven: org.mindrot:jbcrypt

Integer overflow in the crypt_raw method in the key-stretching implementation in JBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

 https://cve.radiocsirt.org/vuln/gsd-2015-0886 gsd-2015-0886 2026-10-02T17:29:13.262797+00:00 gsd-2015-0886 https://cve.radiocsirt.org/vuln/jvndb-2015-000033 jvndb-2015-000033 2026-10-02T17:29:13.262808+00:00

jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0886 Withdrawn: UBUNTU-CVE-2015-0886 2026-10-02T17:29:13.262825+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: libjbcrypt-java, Ubuntu:18.04:LTS: libjbcrypt-java

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.