Lucene search
+L

10081 matches found

OpenVAS
OpenVAS
added 2021/08/13 12:00 a.m.41 views

OpenSSL: Timing-based attacks on SSL/TLS with CBC encryption (CVE-2003-0078) - Windows

OpenSSL is prone to timing-based attacks on SSL/TLS with CBC encryption. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

5CVSS6.5AI score0.13718EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/08/13 12:00 a.m.27 views

OpenSSL: Multiple Vulnerabilities (CVE-2003-0131, CVE-2003-0147) - Linux

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.5AI score0.06393EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2021/08/12 5:21 p.m.163 views

GitHub Security Lab: Java: Timing attacks while comparing results of cryptographic operations

This bug was reported directly to GitHub Security Lab...

1.6AI score
SaveExploits0
NVD
NVD
added 2021/08/11 10:15 p.m.28 views

CVE-2021-1109

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

7.2CVSS0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.7 views

CVE-2021-1109

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

6.3CVSS6.6AI score0.00194EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/11 10:15 p.m.5 views

CVE-2021-1109

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

7.2CVSS5.5AI score0.00194EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/11 10:15 p.m.23 views

Design/Logic Flaw

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

3.3CVSS6.3AI score0.00194EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/11 9:33 p.m.39 views

CVE-2021-1109

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

7.2CVSS7.2AI score0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/11 9:33 p.m.78 views

CVE-2021-1109

CVE-2021-1109 describes a timing-related vulnerability in NVIDIA camera firmware that could allow an unauthorized modification by camera resources, leading to loss of data integrity or denial of service across multiple streams. Connected sources confirm the issue affects NVIDIA Jetson Linux envir...

7.2CVSS6.3AI score0.00194EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/11 12:00 a.m.47 views

RHEL 7 : microcode_ctl (RHSA-2021:3029)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3029 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543...

8.8CVSS7.1AI score0.00587EPSS
SaveExploits0References21
Lenovo
Lenovo
added 2021/08/10 8:13 p.m.35 views

Nuvoton TPM 2.0 ECDSA Vulnerability - Lenovo Support US

No description provided...

3.8CVSS4.2AI score0.00207EPSS
SaveExploits0
NVD
NVD
added 2021/08/10 5:15 p.m.24 views

CVE-2020-25082

An attacker with physical access to Nuvoton Trusted Platform Module NPCT75x 7.2.x before 7.2.2.0 could extract an Elliptic Curve Cryptography ECC private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy...

3.8CVSS0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/10 5:15 p.m.11 views

CVE-2020-25082

An attacker with physical access to Nuvoton Trusted Platform Module NPCT75x 7.2.x before 7.2.2.0 could extract an Elliptic Curve Cryptography ECC private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy...

3.8CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/10 5:15 p.m.25 views

Code injection

An attacker with physical access to Nuvoton Trusted Platform Module NPCT75x 7.2.x before 7.2.2.0 could extract an Elliptic Curve Cryptography ECC private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy...

1.9CVSS4.1AI score0.00207EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2021/08/10 4:13 p.m.13 views

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

5.5CVSS6.3AI score0.00516EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2021/08/10 4:13 p.m.7 views

hw: observable timing discrepancy in some Intel Processors

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

3.3CVSS6.5AI score0.00383EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/08/10 3:28 p.m.38 views

CVE-2020-25082

An attacker with physical access to Nuvoton Trusted Platform Module NPCT75x 7.2.x before 7.2.2.0 could extract an Elliptic Curve Cryptography ECC private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy...

3.8CVSS4AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/10 3:28 p.m.84 views

CVE-2020-25082

CVE-2020-25082 concerns Nuvoton NPCT75x TPMs where an attacker with physical access could extract an ECC private key via a side-channel timing discrepancy in ECDSA. Affected products are NPCT75x with firmware series 7.2.x prior to 7.2.2.0. The vulnerability arises from observable timing differenc...

3.8CVSS4.1AI score0.00207EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/08/10 12:00 a.m.25 views

CentOS: Security Advisory for microcode_ctl (CESA-2021:3028)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.8AI score0.00587EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2021/08/09 3:29 p.m.615 views

microcode_ctl security update

CentOS Errata and Security Advisory CESA-2021:3028 An update for microcodectl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

8.8CVSS7AI score0.00587EPSS
SaveExploits0References7
Rows per page
Query Builder