Wszystkie CVE z ostatnich sześciu miesięcy, aktualizowane codziennie.

Pokazano 6 z 6

• ŚredniCVE-2026-84308Ocena CVSS 6.31 wrz 2026

  phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add() and subtract(). During the Montgomery la

  CWE-208CWE-385
• NiskiCVE-2026-55785Ocena CVSS 3.728 sie 2026

  free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedur

  CWE-208CWE-385CWE-532
• ŚredniCVE-2026-6478Ocena CVSS 6.514 maj 2026

  Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cur

  CWE-385postgresql postgresql
• WysokiCVE-2026-5598Ocena CVSS 7.515 kwi 2026

  Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from

  CWE-385
• ŚredniCVE-2025-69893Ocena CVSS 4.614 kwi 2026

  A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 hardware wallets. This originates from the BIP-39 standard gu

  CWE-385
• ŚredniCVE-2025-66442Ocena CVSS 5.11 kwi 2026

  In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.

  CWE-385arm mbed_tlsarm tf-psa-crypto