Lucene search
+L

6 matches found

OpenVAS
OpenVAS
•added 2025/05/26 12:00 a.m.•4 views

Fedora: Security Advisory (FEDORA-2025-ce51c124a5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7AI score0.0037EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/04/18 12:00 a.m.•9 views

Fedora: Security Advisory (FEDORA-2025-e6f5710dba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6AI score0.0037EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/04/17 12:00 a.m.•12 views

Fedora 40 : perl-String-Compare-ConstantTime (2025-e6f5710dba)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e6f5710dba advisory. This release fixes CVE-2024-13939 leaking the length of a secret string Tenable has extracted the preceding description block directly from the Fedo...

7.4AI score0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•14 views

MetaCPAN String::Compare::ConstantTime 安全漏洞

MetaCPAN String::Compare::ConstantTime is a component of the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN String::Compare::ConstantTime version 0.321 and earlier, which stems from a timing attack that could disclose the length of a secret string...

7.5CVSS7.3AI score0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•1 views

CVE-2024-13939: Observable Timing Discrepancy

String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different, because equals returns false right away the size of the secret string m...

7.5CVSS7.2AI score0.0037EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•11 views

PT-2025-13421 · Unknown +1 · String::Compare::Constanttime +1

Name of the Vulnerable Software and Affected Versions: String::Compare::ConstantTime versions prior to 0.322 Description: The issue allows an attacker to guess the length of a secret string through timing attacks. According to the documentation, if the lengths of the strings are different, the si...

7.5CVSS7.3AI score0.0037EPSS
SaveExploits0References17
Rows per page
Query Builder