In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
CVE-2026-59652
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
#advisory
共收录 23627 条相关情报。
← 返回所有主题In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value....
CVE-2026-59650
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and...
CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a
In trusted_mem, there is a possible escalation of privilege due to improper input validation....
CVE-2026-20469
In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e
In Telephony, there is a possible information disclosure due to a missing permission check. This...
CVE-2026-20470
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf
In apusys, there is a possible escalation of privilege due to a missing bounds check. This could...
CVE-2026-20467
In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalatio
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This...
CVE-2026-20466
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalat
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session...
CVE-2026-59640
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for...
CVE-2026-59641
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This iss
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored....
CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affect
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by...
CVE-2026-59649
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issu
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self...
CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count....
CVE-2026-59647
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when...
CVE-2026-59642
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked...
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This is
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero...
CVE-2026-59639
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue al
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from...
CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before...
CVE-2026-12185
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default...
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.