https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:38:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-004 certfr-2021-avi-004 https://cve.radiocsirt.org/vuln/certfr-2021-avi-004 https://cve.radiocsirt.org/vuln/euvd-2026-46897 EUVD-2026-46897 https://cve.radiocsirt.org/vuln/euvd-2026-46897 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28052 <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28052 https://cve.radiocsirt.org/vuln/ghsa-73xv-w5gp-frxh <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk15, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-ext-jdk15on, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk16, Maven: org.bouncycastle:bcprov-ext-jdk16</p> <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> <p><strong>Affected:</strong> Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk15, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-ext-jdk15on, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk16, Maven: org.bouncycastle:bcprov-ext-jdk16</p> <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> https://cve.radiocsirt.org/vuln/ghsa-73xv-w5gp-frxh https://cve.radiocsirt.org/vuln/gsd-2020-28052 gsd-2020-28052 https://cve.radiocsirt.org/vuln/gsd-2020-28052 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10661-1 <p>bouncycastle-1.68-3.2 on GA media</p> <p>bouncycastle-1.68-3.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10661-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 <p>guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client</p> <p>guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0872 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28052 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bouncycastle, Ubuntu:18.04:LTS: bouncycastle, Ubuntu:20.04:LTS: bouncycastle, Ubuntu:22.04:LTS: bouncycastle, Ubuntu:24.04:LTS: bouncycastle, Ubuntu:25.10: bouncycastle</p> <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bouncycastle, Ubuntu:18.04:LTS: bouncycastle, Ubuntu:20.04:LTS: bouncycastle, Ubuntu:22.04:LTS: bouncycastle, Ubuntu:24.04:LTS: bouncycastle, Ubuntu:25.10: bouncycastle</p> <p>An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28052 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272