https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:15:52.229629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-004 certfr-2021-avi-004 — De multiples vulnérabilités ont été découvertes dans la bibliothèque cryptographique Bouncy Castle. Elle permet à un at… 2026-10-02T17:15:52.364078+00:00 certfr-2021-avi-004 https://cve.radiocsirt.org/vuln/euvd-2026-46897 EUVD-2026-46897 2026-10-02T17:15:52.364138+00:00 EUVD-2026-46897 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28052 fkie_cve-2020-28052 2026-10-02T17:15:52.364157+00:00

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.

 https://cve.radiocsirt.org/vuln/ghsa-73xv-w5gp-frxh GHSA-73xv-w5gp-frxh — Logic error in Legion of the Bouncy Castle BC Java 2026-10-02T17:15:52.364187+00:00

Affected: Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk15, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-ext-jdk15on, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk16, Maven: org.bouncycastle:bcprov-ext-jdk16

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.

 https://cve.radiocsirt.org/vuln/gsd-2020-28052 gsd-2020-28052 2026-10-02T17:15:52.364223+00:00 gsd-2020-28052 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10661-1 openSUSE-SU-2024:10661-1 — bouncycastle-1.68-3.2 on GA media 2026-10-02T17:15:52.364236+00:00

bouncycastle-1.68-3.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 RHSA-2021:0872 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update 2026-10-02T17:15:52.364260+00:00

guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28052 Withdrawn: UBUNTU-CVE-2020-28052 2026-10-02T17:15:52.364286+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: bouncycastle, Ubuntu:18.04:LTS: bouncycastle, Ubuntu:20.04:LTS: bouncycastle, Ubuntu:22.04:LTS: bouncycastle, Ubuntu:24.04:LTS: bouncycastle, Ubuntu:25.10: bouncycastle

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 WID-SEC-W-2023-1272 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-02T17:15:52.364315+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.