Search Vulnerabilities

RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX

Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

Hono - Timing Attack in basicAuth and bearerAuth Middleware

HCL BigFix Platform is affected by a user enumeration vulnerability

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Open WebUI: Account enumeration via observable login timing discrepancy

389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery

OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

Coolify: Timing Attack in GitLab Webhook Token Validation

CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authenticati...

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authenticati...

Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption

NocoDB: User Enumeration via Sign-In Timing

Filament: Timing-based user enumeration on login page