كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 6 من 6

• متوسطةCVE-2026-84308درجة CVSS 6.301‏/09‏/2026

  phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add() and subtract(). During the Montgomery la

  CWE-208CWE-385
• منخفضةCVE-2026-55785درجة CVSS 3.728‏/08‏/2026

  free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedur

  CWE-208CWE-385CWE-532
• متوسطةCVE-2026-6478درجة CVSS 6.514‏/05‏/2026

  Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cur

  CWE-385postgresql postgresql
• عاليةCVE-2026-5598درجة CVSS 7.515‏/04‏/2026

  Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from

  CWE-385
• متوسطةCVE-2025-69893درجة CVSS 4.614‏/04‏/2026

  A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 hardware wallets. This originates from the BIP-39 standard gu

  CWE-385
• متوسطةCVE-2025-66442درجة CVSS 5.101‏/04‏/2026

  In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.

  CWE-385arm mbed_tlsarm tf-psa-crypto