Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A flaw was found in OpenSSH.Oct 15, 2026
- Medium6.8Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.EPSS 0.5%Oct 13, 2026
- Low3.1Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.EPSS 0.2%Oct 13, 2026
- Medium5.3SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE ClauseOct 12, 2026
- Medium5.3Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain s…EPSS 0.2%Oct 6, 2026
- Low3.7The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received dur…EPSS 0.2%Sep 15, 2026
- Low1.0Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially re…EPSS 0.1%Dec 11, 2025
- Medium5.3Twilio Authy Information Disclosure VulnerabilityKEVEPSS 1.7%Jul 2, 2024
- High7.5A flaw was found in m2crypto.Feb 5, 2024
- High7.5A vulnerability was found in GnuTLS.Jan 16, 2024
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.EPSS 1.3%Nov 28, 2023
- High7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.EPSS 1.4%Feb 15, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.EPSS 16.2%Feb 8, 2023
- High7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and t…EPSS 2.3%Jun 8, 2021
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.EPSS 2.9%Jun 29, 2020
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.EPSS 0.5%Sep 25, 2019
- Medium4.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing prEPSS 0.9%Jun 13, 2018
17 records · page 1 of 1
PreviousNext