Son altı ayın tüm CVE kayıtları, her gün güncellenir.

6 kayıttan 6 tanesi gösteriliyor

• OrtaCVE-2026-84308CVSS puanı 6.31 Eyl 2026

  phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add() and subtract(). During the Montgomery la

  CWE-208CWE-385
• DüşükCVE-2026-55785CVSS puanı 3.728 Ağu 2026

  free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedur

  CWE-208CWE-385CWE-532
• OrtaCVE-2026-6478CVSS puanı 6.514 May 2026

  Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cur

  CWE-385postgresql postgresql
• YüksekCVE-2026-5598CVSS puanı 7.515 Nis 2026

  Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from

  CWE-385
• OrtaCVE-2025-69893CVSS puanı 4.614 Nis 2026

  A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 hardware wallets. This originates from the BIP-39 standard gu

  CWE-385
• OrtaCVE-2025-66442CVSS puanı 5.11 Nis 2026

  In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.

  CWE-385arm mbed_tlsarm tf-psa-crypto