Lucene search
+L

267 matches found

OSV
OSV
•added 2020/01/22 12:00 p.m.•40 views

RUSTSEC-2020-0156 Observable Discrepancy in libsecp256k1-rs

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.9CVSS5.3AI score0.00881EPSS
SaveExploits0References3
RustSec
RustSec
•added 2020/01/22 12:00 p.m.•28 views

Observable Discrepancy in libsecp256k1-rs

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.9CVSS3.9AI score0.00881EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/20 12:00 a.m.•4 views

CVE-2015-8313: Observable Discrepancy

GnuTLS incorrectly validates the first byte of padding in CBC modes...

5.9CVSS6.2AI score0.01685EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/25 12:00 a.m.•3 views

CVE-2019-6651: Observable Discrepancy

In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request...

5.3CVSS6AI score0.01102EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/28 12:00 a.m.•7 views

CVE-2019-6602: Observable Discrepancy

In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request...

7.5CVSS5.8AI score0.01779EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/10 12:00 a.m.•6 views

CVE-2018-10949: Observable Discrepancy

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the "HTTP 404 - account is not active" and "HTTP 401 - must authenticate" errors...

5.3CVSS5.9AI score0.02428EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/03/18 12:00 a.m.•11 views

CVE-2004-0243: Observable Discrepancy

AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods...

5CVSS5.9AI score0.01682EPSS
SaveExploits0References2
Rows per page
Query Builder