Critical
CVE-2025-14813
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filters
Medium
CVE-2026-0636
Bouncy Castle has an LDAP injection
High
CVE-2026-5598
Bouncy Castle Has Covert Timing Channel Vulnerability
Medium
CVE-2025-8885
Bouncy Castle for Java on All (API modules) allows Excessive Allocation
Medium
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Medium
CVE-2024-30172
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Medium
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Medium
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Medium
CVE-2023-33202
Bouncy Castle Denial of Service (DoS)
Medium
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability
Medium
CVE-2020-15522
Timing based private key exposure in Bouncy Castle
High
CVE-2020-28052
Logic error in Legion of the Bouncy Castle BC Java
Medium
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle
High
CVE-2019-17359
Out-of-Memory Error in Bouncy Castle Crypto
Medium
CVE-2016-1000345
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000344
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode
Medium
CVE-2015-7940
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000352
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
Low
CVE-2016-1000346
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
High
CVE-2016-1000343
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
High
CVE-2016-1000342
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification
Medium
CVE-2016-1000341
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000340
The Bouncy Castle JCE Provider carry a propagation bug
Medium
CVE-2016-1000339
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.