CWE-203 · Observable Discrepancy (page 7)
Page 7 of 8 — CVEs classified under CWE-203, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21424 | Medium | 5.3 | 2021-05-13 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant… |
CVE-2021-1486 | Medium | 5.3 | 2021-05-06 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the i… |
CVE-2021-31866 | Medium | 5.3 | 2021-04-28 | Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by observing timing differences in string co… |
CVE-2021-31406 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 (Vaadin 15.0.0 through 18.0.6)… |
CVE-2021-31404 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 (Vaadin 10.0.0 through 10.0.16), 1… |
CVE-2021-31403 | Medium | 4.0 | 2021-04-23 | Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), an… |
CVE-2021-29446 | Medium | 5.9 | 2021-04-16 | jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CB… |
CVE-2021-29445 | Medium | 5.9 | 2021-04-16 | jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CB… |
CVE-2021-29444 | Medium | 5.9 | 2021-04-16 | jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC… |
CVE-2021-29443 | Medium | 5.9 | 2021-04-16 | jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CB… |
CVE-2020-35518 | Medium | 5.3 | 2021-03-26 | When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthentica… |
CVE-2020-27170 | Medium | 4.7 | 2021-03-20 | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading… |
CVE-2020-1926 | Medium | 5.9 | 2021-03-16 | Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of a… |
CVE-2021-21181 | Medium | 6.5 | 2021-03-09 | Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from… |
CVE-2021-21173 | Medium | 6.5 | 2021-03-09 | Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted… |
CVE-2021-27583 | Medium | 5.3 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability… |
CVE-2020-11287 | High | 7.5 | 2021-02-22 | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snap… |
CVE-2020-9389 | Low | 3.7 | 2021-02-03 | A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious u… |
CVE-2021-0321 | Medium | 5.5 | 2021-01-11 | In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel informati… |
CVE-2020-28208 | Medium | 5.3 | 2021-01-08 | An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1. |
CVE-2019-12953 | Medium | 5.3 | 2020-12-30 | Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599. |
CVE-2020-35624 | Medium | 5.3 | 2020-12-21 | An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide uni… |
CVE-2020-35480 | Medium | 5.3 | 2020-12-18 | An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due t… |
CVE-2020-27026 | Medium | 5.5 | 2020-12-15 | During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local inform… |
CVE-2020-0464 | Medium | 5.5 | 2020-12-14 | In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed w… |
CVE-2020-7962 | Medium | 5.3 | 2020-11-13 | An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a… |
CVE-2020-12912 | Medium | 5.5 | 2020-11-12 | A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interfa… |
CVE-2020-8695 | Medium | 5.5 | 2020-11-12 | Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local ac… |
CVE-2020-26939 | Medium | 5.3 | 2020-11-02 | In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observa… |
CVE-2020-3585 | Medium | 5.3 | 2020-10-21 | A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 10… |
CVE-2020-1685 | Medium | 5.8 | 2020-10-16 | When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the discard a… |
CVE-2020-4699 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-4661 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-4660 | Medium | 5.3 | 2020-10-12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which cou… |
CVE-2020-5143 | Medium | 5.3 | 2020-10-12 | SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server respon… |
CVE-2020-12401 | Medium | 4.7 | 2020-10-08 | During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time… |
CVE-2020-12400 | Medium | 4.7 | 2020-10-08 | When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side chan… |
CVE-2020-15237 | Medium | 5.9 | 2020-10-05 | In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of th… |
CVE-2020-25200 | Medium | 5.3 | 2020-10-01 | Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 40… |
CVE-2020-5929 | Medium | 5.9 | 2020-09-25 | In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual Server conf… |
CVE-2020-3509 | High | 8.6 | 2020-09-24 | A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacke… |
CVE-2020-12788 | High | 7.5 | 2020-09-14 | CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks. |
CVE-2020-11683 | Medium | 6.8 | 2020-09-14 | A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently… |
CVE-2020-1968 | Low | 3.7 | 2020-09-09 | The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have… |
CVE-2020-16150 | Medium | 5.5 | 2020-09-02 | A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret… |
CVE-2020-25065 | High | 7.5 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an… |
CVE-2020-24008 | Medium | 5.3 | 2020-08-26 | Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to deter… |
CVE-2020-15151 | High | 8.0 | 2020-08-20 | OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface… |
CVE-2020-1459 | High | 7.5 | 2020-08-17 | An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "str… |
CVE-2020-17478 | High | 7.5 | 2020-08-10 | ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm. |
CVE-2020-9690 | Medium | 4.2 | 2020-07-29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to sign… |
CVE-2020-11625 | Medium | 5.3 | 2020-07-23 | An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438… |
CVE-2020-6531 | Medium | 4.3 | 2020-07-22 | Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTM… |
CVE-2019-19338 | Medium | 5.5 | 2020-07-13 | A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of inst… |
CVE-2020-12402 | Medium | 4.4 | 2020-07-09 | During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow… |
CVE-2020-12399 | Medium | 4.4 | 2020-07-09 | NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thund… |
CVE-2020-15392 | Medium | 5.3 | 2020-07-07 | A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error message… |
CVE-2020-14145 | Medium | 5.9 | 2020-06-29 | The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-mi… |
CVE-2020-14002 | Medium | 5.9 | 2020-06-29 | PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to t… |
CVE-2020-9588 | High | 7.2 | 2020-06-26 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerab… |
CVE-2020-11735 | Medium | 5.3 | 2020-06-25 | The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective co… |
CVE-2020-4028 | Medium | 5.3 | 2020-06-23 | Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this m… |
CVE-2020-13998 | Medium | 5.3 | 2020-06-11 | Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page o… |
CVE-2020-13844 | Medium | 5.5 | 2020-06-08 | Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to… |
CVE-2019-14067 | Medium | 5.5 | 2020-06-02 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto… |
CVE-2020-13413 | Medium | 5.3 | 2020-05-22 | An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user… |
CVE-2020-6473 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from proc… |
CVE-2020-11063 | Low | 3.7 | 2020-05-13 | In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password reset functionality for backend users. Th… |
CVE-2019-14007 | Medium | 5.5 | 2020-04-16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruptio… |
CVE-2019-10483 | Medium | 5.5 | 2020-04-16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2020-10932 | Medium | 4.7 | 2020-04-15 | An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover th… |
CVE-2020-11713 | High | 7.5 | 2020-04-12 | wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks. |
CVE-2020-11576 | Medium | 5.3 | 2020-04-08 | Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) a… |
CVE-2020-10102 | Medium | 5.3 | 2020-03-05 | An issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is implemented in a way that would enable an anonymous user to guess valid… |
CVE-2020-7959 | Medium | 5.3 | 2020-02-17 | LabVantage LIMS 8.3 does not properly maintain the confidentiality of database names. For example, the web application exposes the database name. An attacker m… |
CVE-2020-8989 | Medium | 5.3 | 2020-02-13 | In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata a… |
CVE-2020-6400 | Medium | 6.5 | 2020-02-11 | Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2013-1422 | Medium | 5.3 | 2020-02-04 | webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user"). |
CVE-2020-2102 | Medium | 5.3 | 2020-01-29 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. |
CVE-2020-2101 | Medium | 5.3 | 2020-01-29 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially a… |
CVE-2014-4156 | Medium | 5.3 | 2020-01-27 | Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability |
CVE-2014-9720 | Medium | 6.5 | 2020-01-24 | Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attacker… |
CVE-2019-16516 | Medium | 5.3 | 2020-01-23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauth… |
CVE-2019-18222 | Medium | 4.7 | 2020-01-23 | The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the invers… |
CVE-2019-20399 | Medium | 5.9 | 2020-01-23 | A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a s… |
CVE-2019-9472 | Medium | 5.5 | 2020-01-06 | In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additi… |
CVE-2019-19805 | Medium | 5.3 | 2019-12-30 | _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether an email address i… |
CVE-2015-8313 | Medium | 5.9 | 2019-12-20 | GnuTLS incorrectly validates the first byte of padding in CBC modes |
CVE-2019-16782 | Medium | 6.3 | 2019-12-18 | There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attacker… |
CVE-2019-18850 | High | 7.5 | 2019-12-04 | TrevorC2 v1.1/v1.2 fails to prevent fingerprinting primarily via a discrepancy between response headers when responding to different HTTP methods, also via pre… |
CVE-2019-13456 | Medium | 6.5 | 2019-12-03 | In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the… |
CVE-2015-0837 | Medium | 5.9 | 2019-11-29 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when… |
CVE-2019-13684 | Medium | 5.3 | 2019-11-25 | Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2019-13666 | High | 7.4 | 2019-11-25 | Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2019-18887 | High | 8.1 | 2019-11-21 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timi… |
CVE-2019-18886 | Medium | 5.3 | 2019-11-21 | An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on wheth… |
CVE-2019-10764 | High | 7.4 | 2019-11-18 | In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the… |
CVE-2019-16863 | Medium | 5.9 | 2019-11-14 | STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA… |
CVE-2019-18673 | Medium | 4.6 | 2019-11-02 | On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number… |
CVE-2019-14360 | Medium | 4.6 | 2019-11-02 | On Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on… |