BC
Product
Bc-java
53
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 4High 30Medium 16Low 1
Watch
Add Bc-java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1000346 | 3.7 | Jun 4 | In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated Affected: through 1.55 |
| CVE-2013-1624 | – | Feb 8 | The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check… Affected: 1.01; 1.02; 1.03; 1.04; 1.05; 1.06; +34 more |
| CVE-2007-6721 | – | Mar 30 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to… Affected: through 1.37; 1.01; 1.02; 1.03; 1.04; 1.05; +31 more |