1735 matches found
CVE-2026-24715
The QuRouter software is affected by an observable timing discrepancy vulnerability (CWE-208). If exploited, this flaw could allow remote attackers to obtain sensitive data . The issue has been resolved in QuRouter version 2.7.2.113 and later. No specific exploit details or in-the-wild exploitati...
EUVD-2026-101873
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...
CVE-2026-24715 Lack of Reproducible Vulnerability Evidence in QNAP Report
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...
CVE-2026-24715: Observable Timing Discrepancy
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...
CVE-2026-87518
An observable discrepancy flaw was found in the Safebrowsing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517917560...
BIT-GITEA-2026-95106 Gitea review and execution mismatch through duplicate tree entries
Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, while git checkout, Gitea Actions, and release archives use the last. A contributor could open a pull request whose diff...
CVE-2026-110141
An observable discrepancy flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568895734...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130101)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130101 advisory. Observable Timing Discrepancy vulnerabilitywhen comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-...
Unity Linux 20.1070a Security Update: pam (UTSA-2026-130124)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130124 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...
CVE-2026-49265: Observable Timing Discrepancy
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/granttypes/authorizationcode.py compare attacker-supplied codeverifier values with stored challenges using ordinary string equality in...
CVE-2026-109379
A flaw was found in Cockpit. An observable timing discrepancy in the authentication mechanism allows an unauthenticated remote attacker to enumerate valid user accounts. By submitting login requests and measuring response times, an attacker can identify whether a username or email address exists...
CVE-2026-109379
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check. Attackers can post login attempts and measure response times, since existing accounts incur two bcrypt operations...
EUVD-2026-97877
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check. Attackers can post login attempts and measure response times, since existing accounts incur two bcrypt operations...
CVE-2026-109379 Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check. Attackers can post login attempts and measure response times, since existing accounts incur two bcrypt operations...
CVE-2026-109379
Cockpit CMS 2.14.1 is affected by an observable timing discrepancy vulnerability within the /auth/check endpoint. Due to an incomplete timing fix, an unauthenticated remote attacker can enumerate valid user accounts by submitting login requests and measuring the processing duration. The vulnerabi...
CVE-2026-109379 Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check. Attackers can post login attempts and measure response times, since existing accounts incur two bcrypt operations...
EulerOS 2.0 SP11 : pam (EulerOS-SA-2026-4265)
According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...
EulerOS 2.0 SP13 : pam (EulerOS-SA-2026-4079)
According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...
CVE-2026-109379: Observable Timing Discrepancy
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check. Attackers can post login attempts and measure response times, since existing accounts incur two bcrypt operations...