180 matches found
pypdf 安全漏洞
pypdf is an open-source, free Python library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages within PDF files. Versions of pypdf prior to 6.7.1 contained security vulnerabilities. These vulnerabilities stemmed from /ToUnicode entries in the font parsing, whic...
EUVD-2008-0064
Malware in sbrugna...
EUVD-2018-15545
Malware in sbrugna...
EUVD-2016-10649
Malware in sbrugna...
EUVD-2006-7195
Malware in sbrugna...
EUVD-2020-18961
Malware in sbrugna...
EUVD-2002-0004
Malware in sbrugna...
EUVD-2023-1827
Malicious code in bioql PyPI...
EUVD-2024-54348
Malicious code in bioql PyPI...
EUVD-2025-0041
Malicious code in bioql PyPI...
EUVD-2023-1038
Malicious code in bioql PyPI...
POLARIS: Explainable Artificial Intelligence for Mitigating Power Side-Channel Leakage
Microelectronic systems are widely used in many sensitive applications e.g., manufacturing, energy, defense. These systems increasingly handle sensitive data e.g., encryption key and are vulnerable to diverse threats, such as, power side-channel attacks, which infer sensitive data through dynamic...
CVE-2020-26414
An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string...
CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
PT-2025-14460
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to the execution time for unsuccessful logins, which differs when using a non-existing username compared to an existing one. Recommendations At the moment, there is no...
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Description: The feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the findsecurepivot function and potentially other parts of securematrixsolve. These vulnerabilities are due to Python's execution model, which does not guarantee...
GHSA-Q65W-FG65-79F4 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Description: The feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the findsecurepivot function and potentially other parts of securematrixsolve. These vulnerabilities are due to Python's execution model, which does not guarantee...
CVE-2025-29780 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the...