Critical
CVE-2026-33117
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filters
Critical
CVE-2026-27478
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
Medium
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Medium
CVE-2024-30172
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Medium
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Medium
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Low
ghsa-72fp-w44g-625q
Signing DynamoDB Sets when using the AWS Database Encryption SDK.
Medium
CVE-2017-13098
Observable Discrepancy in BouncyCastle
Critical
CVE-2019-5919
Nablarch Incomplete Cryptography
High
CVE-2007-6721
Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
Critical
CVE-2020-11989
Improper Authentication in Apache Shiro
High
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Critical
CVE-2018-1000613
Deserialization of Untrusted Data in Bouncy castle
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.