https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:17:16.802508+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-1000342 CVE-2016-1000342 2026-10-08T12:17:16.837639+00:00

In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.

 https://cve.radiocsirt.org/vuln/usn-3727-1 USN-3727-1 — bouncycastle vulnerabilities 2026-10-08T12:17:16.837705+00:00

Affected: Ubuntu:14.04:LTS: bouncycastle

It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker could possibly use these issues to obtain sensitive information, including private keys.