Application Testing Suite

DATE	CVE	VULNERABILITY TITLE	RISK
2015-11-09	CVE-2015-7940	Information Exposure vulnerability in multiple products The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack." network low complexity opensuse bouncycastle oracle CWE-200	5.0