Lucene search
+L

1672 matches found

RedhatCVE
RedhatCVE
•added 2025/11/19 4:16 a.m.•15 views

CVE-2025-52457

Observable Timing Discrepancy CWE-208 in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in 9.30.2881 MR3, 9.2...

5.7CVSS6.6AI score0.00146EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/18 4:15 a.m.•17 views

CVE-2025-52457

Observable Timing Discrepancy CWE-208 in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in 9.30.2881 MR3, 9.2...

5.7CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/18 3:25 a.m.•30 views

CVE-2025-52457

Observable Timing Discrepancy CWE-208 in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in 9.30.2881 MR3, 9.2...

5.7CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/18 3:25 a.m.•26 views

CVE-2025-52457

CVE-2025-52457 describes an Observable Timing Discrepancy (CWE-208) in Gallagher HBUS devices that could let an attacker with physical access extract device-specific keys, potentially compromising site security. Affected: Command Centre Server, including 9.30 before vCR9.30.251028a (MR3), 9.20 be...

5.7CVSS5.6AI score0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/18 3:25 a.m.•7 views

CVE-2025-52457

Observable Timing Discrepancy CWE-208 in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in 9.30.2881 MR3, 9.2...

5.7CVSS5.6AI score0.00146EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•4 views

CVE-2025-52457: Observable Timing Discrepancy

Observable Timing Discrepancy CWE-208 in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in 9.30.2881 MR3, 9.2...

5.7CVSS5.6AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 6:00 p.m.•26 views

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

5.3CVSS6.6AI score0.00244EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•14 views

Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2020-14145)

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client. NOTE: some reports...

5.9CVSS6.4AI score0.02057EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•7 views

Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2019-13627)

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7. This plugin only works with Tenable.ot. Please visit...

6.3CVSS6.4AI score0.0051EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•9 views

Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2023-5981)

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5 padding. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

5.9CVSS6.5AI score0.01267EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•22 views

Directus 安全漏洞

Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 11.13.0 that stems from a REST API error message discrepancy that could lead to the disclosure of unauthorized...

4.3CVSS5.8AI score0.00326EPSS
SaveExploits1References3
NVD
NVD
•added 2025/11/12 6:15 p.m.•20 views

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

5.3CVSS0.00244EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/12 5:41 p.m.•25 views

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

5.3CVSS0.00244EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/12 5:41 p.m.•75 views

CVE-2025-25236

Omnissa Workspace ONE UEM (affected families: 24.2.x before 24.2.0.36, 24.6.x before 24.6.0.44, or 24.10.x before 24.10.0.25) contains an observable response discrepancy vulnerability (CVE-2025-25236). The issue may allow enumeration of sensitive data such as tenant IDs and user accounts, enablin...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 5:41 p.m.•12 views

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•17 views

Omnissa Workspace ONE UEM 安全漏洞

Omnissa Workspace ONE UEM is an endpoint management platform from Omnissa USA. A security vulnerability exists in Omnissa Workspace ONE UEM that stems from an observable response discrepancy that could cause a malicious actor to enumerate sensitive information such as tenant IDs and user accounts...

5.3CVSS6.3AI score0.00244EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•6 views

CVE-2025-25236: Observable Response Discrepancy

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

5.3CVSS5.7AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 3:02 p.m.•13 views

GO-2025-4036 Mattermost has an Observable Timing Discrepancy vulnerability in github.com/mattermost/mattermost-server

Mattermost has an Observable Timing Discrepancy vulnerability in github.com/mattermost/mattermost-server...

3.7CVSS6.5AI score0.00272EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•4 views

PT-2025-45837

Mattermost has an Observable Timing Discrepancy vulnerability in github.com/mattermost/mattermost-server...

3.7CVSS5.8AI score0.00272EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/10/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-59438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. CVE-2025-59438 Note that Nessus relies on the presence of the package as reported by the vendor...

5.3CVSS5.7AI score0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder