https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:13 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-er14083 <p><strong>Affected:</strong> CleanStart: cassandra-reaper-fips</p> <p>CVE-2015-0886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: cassandra-reaper-fips</p> <p>CVE-2015-0886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-er14083 https://cve.radiocsirt.org/vuln/cnvd-2015-01394 cnvd-2015-01394 https://cve.radiocsirt.org/vuln/cnvd-2015-01394 https://cve.radiocsirt.org/vuln/euvd-2026-89835 EUVD-2026-89835 https://cve.radiocsirt.org/vuln/euvd-2026-89835 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0886 <p>Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> <p>Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0886 https://cve.radiocsirt.org/vuln/ghsa-9h6p-92jq-888x <p><strong>Affected:</strong> Maven: org.mindrot:jbcrypt</p> <p>Integer overflow in the crypt_raw method in the key-stretching implementation in JBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> <p><strong>Affected:</strong> Maven: org.mindrot:jbcrypt</p> <p>Integer overflow in the crypt_raw method in the key-stretching implementation in JBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> https://cve.radiocsirt.org/vuln/ghsa-9h6p-92jq-888x https://cve.radiocsirt.org/vuln/gsd-2015-0886 gsd-2015-0886 https://cve.radiocsirt.org/vuln/gsd-2015-0886 https://cve.radiocsirt.org/vuln/jvndb-2015-000033 <p>jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000033 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0886 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libjbcrypt-java, Ubuntu:18.04:LTS: libjbcrypt-java</p> <p>Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libjbcrypt-java, Ubuntu:18.04:LTS: libjbcrypt-java</p> <p>Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0886