CWE-203 · Observable Discrepancy (page 6)
Page 6 of 8 — CVEs classified under CWE-203, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-1032 | Low | 3.3 | 2021-12-15 | In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1031 | Low | 3.3 | 2021-12-15 | In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissi… |
CVE-2021-1030 | Medium | 5.5 | 2021-12-15 | In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permis… |
CVE-2021-1026 | Medium | 5.5 | 2021-12-15 | In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform… |
CVE-2021-1018 | Low | 3.3 | 2021-12-15 | In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in… |
CVE-2021-1015 | Low | 3.3 | 2021-12-15 | In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side chann… |
CVE-2021-1014 | Medium | 5.5 | 2021-12-15 | In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2021-1013 | Medium | 5.5 | 2021-12-15 | In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is inst… |
CVE-2021-1012 | Medium | 5.5 | 2021-12-15 | In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1009 | Medium | 5.5 | 2021-12-15 | In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due t… |
CVE-2021-1005 | Medium | 5.5 | 2021-12-15 | In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to si… |
CVE-2021-0995 | Low | 3.3 | 2021-12-15 | In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissi… |
CVE-2021-0990 | Low | 3.3 | 2021-12-15 | In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-0989 | Low | 3.3 | 2021-12-15 | In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2021-0988 | Low | 3.3 | 2021-12-15 | In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without qu… |
CVE-2021-0987 | Low | 3.3 | 2021-12-15 | In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to si… |
CVE-2021-43823 | Medium | 6.5 | 2021-12-13 | Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source… |
CVE-2021-44848 | Medium | 5.3 | 2021-12-13 | In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username ex… |
CVE-2021-1924 | Critical | 9.0 | 2021-11-12 | Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-43398 | Medium | 5.3 | 2021-11-04 | Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key len… |
CVE-2021-34580 | High | 7.5 | 2021-10-27 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted… |
CVE-2021-38476 | Medium | 6.5 | 2021-10-19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This m… |
CVE-2021-38562 | High | 7.5 | 2021-10-18 | Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack again… |
CVE-2021-26318 | Medium | 4.7 | 2021-10-13 | A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space… |
CVE-2021-24651 | High | 7.5 | 2021-10-11 | The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not… |
CVE-2021-37968 | Medium | 4.3 | 2021-10-08 | Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted H… |
CVE-2021-20376 | Medium | 4.3 | 2021-10-07 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in… |
CVE-2021-38153 | Medium | 5.9 | 2021-09-22 | Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such… |
CVE-2021-34576 | Medium | 4.3 | 2021-09-16 | In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumpti… |
CVE-2016-20012 | Medium | 5.3 | 2021-09-15 | OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whet… |
CVE-2021-39189 | Medium | 5.3 | 2021-09-15 | Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password fun… |
CVE-2021-37151 | Medium | 5.3 | 2021-09-01 | CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy… |
CVE-2020-25082 | Low | 3.8 | 2021-08-10 | An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private k… |
CVE-2021-38209 | Low | 3.3 | 2021-08-08 | net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked i… |
CVE-2021-3642 | Medium | 5.3 | 2021-08-05 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to… |
CVE-2021-37848 | High | 7.5 | 2021-08-02 | common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison. |
CVE-2021-34575 | High | 7.5 | 2021-08-02 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the serv… |
CVE-2021-34556 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-35477 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-37606 | Medium | 5.3 | 2021-07-30 | Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two… |
CVE-2021-20113 | Medium | 5.3 | 2021-07-30 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registere… |
CVE-2020-36424 | Medium | 4.7 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack again… |
CVE-2020-36422 | Medium | 5.3 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_… |
CVE-2020-36421 | Medium | 5.3 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could b… |
CVE-2021-24117 | Medium | 4.9 | 2021-07-14 | In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain informa… |
CVE-2021-24119 | Medium | 4.9 | 2021-07-14 | In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain informati… |
CVE-2021-24116 | Medium | 4.9 | 2021-07-14 | In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about se… |
CVE-2021-32528 | Medium | 5.3 | 2021-07-07 | Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest c… |
CVE-2021-0089 | Medium | 6.5 | 2021-06-09 | Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
CVE-2021-0086 | Medium | 6.5 | 2021-06-09 | Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclo… |
CVE-2021-0001 | Medium | 4.7 | 2021-06-09 | Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local acc… |
CVE-2020-24512 | Low | 3.3 | 2021-06-09 | Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2021-26314 | Medium | 5.5 | 2021-06-09 | Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with inc… |
CVE-2021-26313 | Medium | 5.5 | 2021-06-09 | Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwr… |
CVE-2021-33560 | High | 7.5 | 2021-06-08 | Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_pow… |
CVE-2021-29621 | Medium | 5.3 | 2021-06-07 | Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilder <= 3.2.3. Allows for a non… |
CVE-2021-33880 | Medium | 5.9 | 2021-06-06 | The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_aut… |
CVE-2021-33838 | High | 7.5 | 2021-06-04 | Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur… |
CVE-2021-22892 | High | 7.5 | 2021-05-27 | An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumera… |
CVE-2020-27211 | Medium | 5.7 | 2021-05-21 | Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can… |
CVE-2021-29415 | Medium | 5.5 | 2021-05-21 | The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in the NordicSemiconductor nRF52840 through 2… |
CVE-2021-29687 | Medium | 5.3 | 2021-05-20 | IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IB… |
CVE-2021-27342 | Medium | 5.9 | 2021-05-17 | An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumve… |
CVE-2021-21424 | Medium | 5.3 | 2021-05-13 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant… |
CVE-2021-1486 | Medium | 5.3 | 2021-05-06 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the i… |
CVE-2021-31866 | Medium | 5.3 | 2021-04-28 | Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by observing timing differences in string co… |
CVE-2021-31406 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 (Vaadin 15.0.0 through 18.0.6)… |
CVE-2021-31404 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 (Vaadin 10.0.0 through 10.0.16), 1… |
CVE-2021-31403 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), an… |
CVE-2021-29446 | Medium | 5.9 | 2021-04-16 | jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CB… |
CVE-2021-29445 | Medium | 5.9 | 2021-04-16 | jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CB… |
CVE-2021-29444 | Medium | 5.9 | 2021-04-16 | jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC… |
CVE-2021-29443 | Medium | 5.9 | 2021-04-16 | jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CB… |
CVE-2020-35518 | Medium | 5.3 | 2021-03-26 | When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthentica… |
CVE-2020-27170 | Medium | 4.7 | 2021-03-20 | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading… |
CVE-2020-1926 | Medium | 5.9 | 2021-03-16 | Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of a… |
CVE-2021-21181 | Medium | 6.5 | 2021-03-09 | Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from… |
CVE-2021-21173 | Medium | 6.5 | 2021-03-09 | Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted… |
CVE-2021-27583 | Medium | 5.3 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability… |
CVE-2020-11287 | High | 7.5 | 2021-02-22 | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snap… |
CVE-2020-9389 | Low | 3.7 | 2021-02-03 | A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious u… |
CVE-2021-0321 | Medium | 5.5 | 2021-01-11 | In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel informati… |
CVE-2020-28208 | Medium | 5.3 | 2021-01-08 | An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1. |
CVE-2019-12953 | Medium | 5.3 | 2020-12-30 | Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599. |
CVE-2020-35624 | Medium | 5.3 | 2020-12-21 | An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide uni… |
CVE-2020-35480 | Medium | 5.3 | 2020-12-18 | An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due t… |
CVE-2020-27026 | Medium | 5.5 | 2020-12-15 | During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local inform… |
CVE-2020-0464 | Medium | 5.5 | 2020-12-14 | In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed w… |
CVE-2020-7962 | Medium | 5.3 | 2020-11-13 | An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a… |
CVE-2020-12912 | Medium | 5.5 | 2020-11-12 | A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interfa… |
CVE-2020-8695 | Medium | 5.5 | 2020-11-12 | Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local ac… |
CVE-2020-26939 | Medium | 5.3 | 2020-11-02 | In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observa… |
CVE-2020-3585 | Medium | 5.3 | 2020-10-21 | A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 10… |
CVE-2020-1685 | Medium | 5.8 | 2020-10-16 | When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the discard a… |
CVE-2020-4699 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-4661 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-4660 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-5143 | Medium | 5.3 | 2020-10-12 | SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server respon… |
CVE-2020-12401 | Medium | 4.7 | 2020-10-08 | During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time… |
CVE-2020-12400 | Medium | 4.7 | 2020-10-08 | When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side chan… |