181 matches found
EUVD-2016-9065
Malware in sbrugna...
EUVD-2024-0067
Malicious code in bioql PyPI...
EUVD-2023-1611
Malicious code in bioql PyPI...
EUVD-2022-7090
Malicious code in bioql PyPI...
EUVD-2024-38258
Malicious code in bioql PyPI...
EUVD-2022-3248
Malicious code in bioql PyPI...
EUVD-2023-2500
Malicious code in bioql PyPI...
EUVD-2024-0341
Malicious code in bioql PyPI...
EUVD-2022-3793
Malicious code in bioql PyPI...
EUVD-2024-45992
Malicious code in bioql PyPI...
EUVD-2023-2695
Malicious code in bioql PyPI...
EUVD-2022-0587
Malicious code in bioql PyPI...
DEBIAN-CVE-2025-59432
SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...
UBUNTU-CVE-2025-59432
SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...
CVE-2024-47869
Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a timing attack in the way Gradio compares hashes for the analyticsdashboard function. Since the comparison is not done in constant time, an attacker could exploit this by measuring the response ti...
CVE-2024-23903
Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token...
CVE-2023-41935
Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b1154b3fb, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce...
CVE-2022-43411
Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token...
CVE-2022-29185
totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password TOTP. Prior to version 1.1.0, token comparison was not constant time, and could theorically be used to guess value of an TOTP token, and thus reuse it in the same time window. The...