1706 matches found
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
DEBIAN-CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
ALPINE-CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
UBUNTU-CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438: Observable Timing Discrepancy
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
PT-2025-42888
Name of the Vulnerable Software and Affected Versions Mbed TLS versions through 3.6.4 Description Mbed TLS contains an Observable Timing Discrepancy. This issue may allow for timing attacks. Recommendations Update to a version of Mbed TLS newer than 3.6.4...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
The mbedtls library (through version 3.6.4 ) contains an observable timing discrepancy that can lead to a padding oracle attack . The vulnerability stems from the timing of cipher error reporting , which can leak information about secrets during cryptographic operations. This issue specifically a...
EUVD-2025-34832
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...
CVE-2025-34255
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...
CVE-2025-34254
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...
CVE-2025-34255
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...
CVE-2025-34255 D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...
GHSA-XR3W-RMVJ-F6M7 Mattermost has an Observable Timing Discrepancy vulnerability
Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...
CVE-2025-34254: Observable Response Discrepancy
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...