Search for packages
| purl | pkg:maven/org.bouncycastle/bcprov-jdk15on@1.65.01 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-73xv-w5gp-frxh
Aliases: CVE-2020-28052 |
Logic error in Legion of the Bouncy Castle BC Java An issue was discovered in Legion of the Bouncy Castle … |
Vulnerable |
|
GHSA-6xx3-rg99-gc3p
Aliases: CVE-2020-15522 |
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA … |
Vulnerable |
|
GHSA-4h8f-2wvx-gg5w
Aliases: CVE-2024-34447 |
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … | There are no reported fixed by versions. |
|
GHSA-hr8g-6v94-x4m9
Aliases: CVE-2023-33201 |
Bouncy Castle For Java LDAP injection vulnerability Bouncy Castle provides the `X509LDAPCertStoreSpi.java` class which can be used in conjunction with … | There are no reported fixed by versions. |
|
CVE-2024-34447
Aliases: GHSA-4h8f-2wvx-gg5w |
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … | There are no reported fixed by versions. |
|
GHSA-v435-xc8x-wvr9
Aliases: CVE-2024-30171 |
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle … | There are no reported fixed by versions. |
|
GHSA-8xfc-gm6g-vgpv
Aliases: CVE-2024-29857 |
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2016-1000345
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For … | |
|
CVE-2016-1000340
|
In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of … | |
|
CVE-2016-1000346
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. … | |
|
CVE-2018-1000613
|
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 … | |
|
CVE-2018-1000180
|
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to … | |
|
CVE-2018-5382
|
Bouncy Castle BKS version 1 keystore (BKS-V1) files use an HMAC that is only 16 bits long, which can allow … | |
|
CVE-2016-1000341
|
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings … | |
|
CVE-2016-1000339
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due … |