https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:57:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14523 bdu:2025-14523 https://cve.radiocsirt.org/vuln/bdu:2025-14523 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0514 certfr-2024-avi-0514 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0514 https://cve.radiocsirt.org/vuln/cleanstart-2026-ia43044 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: strimzi-kafka-operator</p> <p>Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: strimzi-kafka-operator</p> <p>Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ia43044 https://cve.radiocsirt.org/vuln/euvd-2026-159068 EUVD-2026-159068 https://cve.radiocsirt.org/vuln/euvd-2026-159068 https://cve.radiocsirt.org/vuln/fkie_cve-2024-30171 <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-30171 https://cve.radiocsirt.org/vuln/ghsa-v435-xc8x-wvr9 <p><strong>Affected:</strong> Maven: org.bouncycastle:bctls-fips, Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bctls-jdk18on, Maven: org.bouncycastle:bctls-jdk14, Maven: org.bouncycastle:bctls-jdk15to18, NuGet: BouncyCastle, NuGet: BouncyCastle.Cryptography</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> <p><strong>Affected:</strong> Maven: org.bouncycastle:bctls-fips, Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bctls-jdk18on, Maven: org.bouncycastle:bctls-jdk14, Maven: org.bouncycastle:bctls-jdk15to18, NuGet: BouncyCastle, NuGet: BouncyCastle.Cryptography</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> https://cve.radiocsirt.org/vuln/ghsa-v435-xc8x-wvr9 https://cve.radiocsirt.org/vuln/gsd-2024-30171 gsd-2024-30171 https://cve.radiocsirt.org/vuln/gsd-2024-30171 https://cve.radiocsirt.org/vuln/icsa-26-071-03 <p>An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP…</p> <p>An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP…</p> https://cve.radiocsirt.org/vuln/icsa-26-071-03 https://cve.radiocsirt.org/vuln/ncsc-2026-0079 NCSC-2026-0079 https://cve.radiocsirt.org/vuln/ncsc-2026-0079 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13914-1 <p>bouncycastle-1.78.1-1.1 on GA media</p> <p>bouncycastle-1.78.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13914-1 https://cve.radiocsirt.org/vuln/rhsa-2024:4173 <p>bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)</p> <p>bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4173 https://cve.radiocsirt.org/vuln/ssa-485750 <p>An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP…</p> <p>An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP…</p> https://cve.radiocsirt.org/vuln/ssa-485750 https://cve.radiocsirt.org/vuln/suse-su-2024:1539-2 <p>Security update for bouncycastle</p> <p>Security update for bouncycastle</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1539-2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-30171 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-30171 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1031 <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen DNS-Poisoning-Angriff durchzuführen.</p> <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen DNS-Poisoning-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1031