PkgSeer

Vulnerabilities

Last updated 46 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.bouncycastle:bcprov-jdk14 Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks High Risk 7.5 5 months ago 3 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle has an LDAP injection Medium Risk 6.0 5 months ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle Has Covert Timing Channel Vulnerability High Risk 8.0 5 months ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle for Java on All (API modules) allows Excessive Allocation Medium Risk 6.0 1 year ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle crafted signature and public key can be used to trigger an infinite loop Medium Risk 5.3 2 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") Medium Risk 5.9 2 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle Java Cryptography API vulnerable to DNS poisoning Medium Risk 5.9 2 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle Denial of Service (DoS) Medium Risk 5.5 2 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle For Java LDAP injection vulnerability Medium Risk 5.3 3 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. Medium Risk 5.3 2 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 Timing based private key exposure in Bouncy Castle Medium Risk 5.1 5 years ago 18 days ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode High Risk 7.4 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 Medium Risk 6.0 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate High Risk 7.5 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 The Bouncy Castle JCE Provider carry a propagation bug High Risk 7.5 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode High Risk 7.4 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider the other party DH public key is not fully validated Low Risk 3.7 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 Medium Risk 5.3 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 Medium Risk 5.9 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values High Risk 7.5 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 Medium Risk 5.9 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator High Risk 7.5 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification High Risk 7.5 7 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Observable Differences in Behavior to Error Inputs in Bouncy Castle Medium Risk 5.3 5 years ago 1 year ago
org.bouncycastle:bcprov-jdk14 Logic error in Legion of the Bouncy Castle BC Java High Risk 8.1 5 years ago 2 years ago
org.bouncycastle:bcprov-jdk14 Out-of-Memory Error in Bouncy Castle Crypto High Risk 7.5 6 years ago 2 years ago
Data courtesy of OSV.dev
Page 1