CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
CVE-2026-103601
Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of
#advisory
共收录 23210 条相关情报。
← 返回所有主题Unbounded ASN.1 nesting depth causes process-terminating stack overflow
CVE-2026-103600
Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-cs
Unbounded PBE iteration count when decrypting PKCS#8 private keys
CVE-2026-63578
Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters)
Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
CVE-2026-63577
Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)
URI name constraints checked against a mis-parsed host
CVE-2026-63576
Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc.
PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
CVE-2026-63575
Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy C
Unbounded allocation from OpenPGP signature and user attribute subpacket lengths
CVE-2026-63574
Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubp
Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap
CVE-2026-63573
Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legio
Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
CVE-2026-63572
Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc
Attribute certificate path validation does not verify the attribute certificate's signature
CVE-2026-63571
Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,
Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links
CVE-2026-63570
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp be
MTI/A0 DHAgreement does not validate the peer's ephemeral value
CVE-2026-63569
Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Cas
Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
CVE-2026-63568
Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legio
IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
CVE-2026-63567
Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a rem
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-63566
Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in
IesEngine stream-mode MAC forgery via length-dependent KDF split
CVE-2026-16001
Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngin
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
CVE-2026-16000
Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc
AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
CVE-2026-15999
Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter
CVE-2026-15896
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login
CVE-2026-15897
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up