Search Vulnerabilities

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Open WebUI: Account enumeration via observable login timing discrepancy

389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery

OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

Coolify: Timing Attack in GitLab Webhook Token Validation

CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authenticati...

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authenticati...

Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption

NocoDB: User Enumeration via Sign-In Timing

Filament: Timing-based user enumeration on login page

Linux-PAM through 1

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks

Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames

SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

Time-based user enumeration in TREK authentication endpoint

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks