https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:07:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01880 bdu:2019-01880 https://cve.radiocsirt.org/vuln/bdu:2019-01880 https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/euvd-2026-201733 EUVD-2026-201733 https://cve.radiocsirt.org/vuln/euvd-2026-201733 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000613 <p>Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.</p> <p>Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000613 https://cve.radiocsirt.org/vuln/ghsa-4446-656p-f54g <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk15on</p> <p>Legion of the Bouncy Castle Java Cryptography APIs starting in version 1.57 and prior to version 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application.</p> <p>This vulnerability appears to have been fixed in 1.60 and later.</p> <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk15on</p> <p>Legion of the Bouncy Castle Java Cryptography APIs starting in version 1.57 and prior to version 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application.</p> <p>This vulnerability appears to have been fixed in 1.60 and later.</p> https://cve.radiocsirt.org/vuln/ghsa-4446-656p-f54g https://cve.radiocsirt.org/vuln/gsd-2018-1000613 gsd-2018-1000613 https://cve.radiocsirt.org/vuln/gsd-2018-1000613 https://cve.radiocsirt.org/vuln/jvndb-2018-008573 <p>Multiple vulnerabilities have been found in Hitachi Infrastructure Analytics Advisor.</p> <p>Multiple vulnerabilities have been found in Hitachi Infrastructure Analytics Advisor.</p> https://cve.radiocsirt.org/vuln/jvndb-2018-008573 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0607-1 <p>Security update for bouncycastle</p> <p>Security update for bouncycastle</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0607-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000613 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bouncycastle</p> <p>Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bouncycastle</p> <p>Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000613 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1682 <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1682