Search for packages
| purl | pkg:maven/org.keycloak/keycloak-admin-cli@3.2.1.Final |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-1000342
|
In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on … | There are no reported fixed by versions. |
|
CVE-2016-1000345
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For … | There are no reported fixed by versions. |
|
CVE-2016-1000340
|
In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of … | There are no reported fixed by versions. |
|
CVE-2016-1000346
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. … | There are no reported fixed by versions. |
|
CVE-2016-1000343
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key … | There are no reported fixed by versions. |
|
CVE-2018-1000613
|
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 … | There are no reported fixed by versions. |
|
CVE-2019-17359
|
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant … | There are no reported fixed by versions. |
|
CVE-2016-1000341
|
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings … | There are no reported fixed by versions. |
|
CVE-2017-7525
|
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user … | There are no reported fixed by versions. |
|
CVE-2016-1000338
|
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on … | There are no reported fixed by versions. |
|
CVE-2015-6644
|
Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted … | There are no reported fixed by versions. |
|
CVE-2016-1000339
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due … | There are no reported fixed by versions. |
|
CVE-2016-1000344
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This … | There are no reported fixed by versions. |
|
CVE-2016-1000352
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-1498
|
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to … | |
|
CVE-2013-2035
|
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to … | |
|
CVE-2018-1000180
|
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to … | |
|
CVE-2018-5382
|
Bouncy Castle BKS version 1 keystore (BKS-V1) files use an HMAC that is only 16 bits long, which can allow … |