https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:32:18 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/euvd-2026-89005 EUVD-2026-89005 https://cve.radiocsirt.org/vuln/euvd-2026-89005 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1000344 <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-1000344 https://cve.radiocsirt.org/vuln/ghsa-2j2x-hx4g-2gf4 <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk15, Maven: org.bouncycastle:bcprov-jdk15on</p> <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk15, Maven: org.bouncycastle:bcprov-jdk15on</p> <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> https://cve.radiocsirt.org/vuln/ghsa-2j2x-hx4g-2gf4 https://cve.radiocsirt.org/vuln/gsd-2016-1000344 gsd-2016-1000344 https://cve.radiocsirt.org/vuln/gsd-2016-1000344 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10661-1 <p>bouncycastle-1.68-3.2 on GA media</p> <p>bouncycastle-1.68-3.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10661-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2669 <p>1: Class Loader manipulation via request parameters thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data bouncycastle: Information leak in AESFastEngine class bouncycastle: Carry propagation bug in math.raw.Nat??? class bouncycastle: Information exposure in DSA signature generation via timing attack bouncycastle: ECDSA improper validation of ASN.1 encoding of signature bouncycastle: DSA key pair generator generates a weak private key by default bouncycastle: DHIES implementation allowed the use of ECB mode bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack bouncycastle: Other party DH public keys are not fully validated bouncycastle: ECIES implementation allowed the use of ECB mode async-http-client: Invalid URL parsing with &#39;?&#39; undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service tika: Infinite loop in ChmParser can allow remote attacker to cause a denial of service pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via…</p> <p>1: Class Loader manipulation via request parameters thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data bouncycastle: Information leak in AESFastEngine class bouncycastle: Carry propagation bug in math.raw.Nat??? class bouncycastle: Information exposure in DSA signature generation via timing attack bouncycastle: ECDSA improper validation of ASN.1 encoding of signature bouncycastle: DSA key pair generator generates a weak private key by default bouncycastle: DHIES implementation allowed the use of ECB mode bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack bouncycastle: Other party DH public keys are not fully validated bouncycastle: ECIES implementation allowed the use of ECB mode async-http-client: Invalid URL parsing with &#39;?&#39; undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service tika: Infinite loop in ChmParser can allow remote attacker to cause a denial of service pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via…</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2669 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1000344 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bouncycastle</p> <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bouncycastle</p> <p>In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1000344