Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-208 (通过时间差异性导致的信息暴露) — Vulnerability Class 97

97 vulnerabilities classified as CWE-208 (通过时间差异性导致的信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-21671 vantage6 username timing attack — vantage6 3.7 Low2024-01-30
CVE-2023-41097 Potential Timing vulnerability in CBC PKCS7 padding calculations — GSDK 4.6 Medium2023-12-21
CVE-2023-5981 Gnutls: timing side-channel in the rsa-psk authentication — Red Hat Enterprise Linux 8 5.9 Medium2023-11-28
CVE-2022-25332 SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138 — OMAP 4.4 Medium2023-10-19
CVE-2023-25529 NVIDIA DGX 安全漏洞 — DGX H100 BMC 8.0 High2023-09-20
CVE-2023-40182 silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not — silverwaregames-io-issue-tracker 3.7 Low2023-08-25
CVE-2023-25000 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations — Vault 5.0 Medium2023-03-30
CVE-2023-1538 Observable Timing Discrepancy in answerdev/answer — answerdev/answer 8.2 -2023-03-21
CVE-2023-25806 Time discrepancy in authentication responses in OpenSearch — security 5.3 -2023-03-02
CVE-2010-10006 michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy — jopenid 2.6 Low2023-01-17
CVE-2022-42288 NVIDIA BMC 安全漏洞 — NVIDIA DGX servers 5.3 Medium2023-01-13
CVE-2016-15015 viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy — Barzahlen Payment Module PHP SDK 2.6 Low2023-01-08
CVE-2014-125056 Pylons horus services.py timing discrepancy — horus 2.6 Low2023-01-07
CVE-2014-125055 agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancy — easy-scrypt 2.6 Low2023-01-07
CVE-2013-10006 Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy — primecoin 2.6 Low2023-01-01
CVE-2022-4823 InSTEDD Nuntium geopoll_controller.rb timing discrepancy — Nuntium 3.1 Low2022-12-28
CVE-2021-4294 OpenShift OSIN CheckClientSecret timing discrepancy — OSIN 2.6 Low2022-12-28
CVE-2022-39308 GoCD API authentication of user access tokens subject to timing attack during comparison — gocd 6.5 Medium2022-10-14
CVE-2022-31142 Potential Timing Attack Vector in @fastify/bearer-auth — fastify-bearer-auth 7.5 High2022-07-14
CVE-2022-20752 Cisco Unified Communications Products Timing Attack Vulnerability — Cisco Unified Communications Manager 5.3 Medium2022-07-06
CVE-2022-29185 Observable Timing Discrepancy in totp-rs — totp-rs 4.2 Medium2022-05-20
CVE-2021-42016 Siemens RUGGEDCOM 安全漏洞 — RUGGEDCOM i800 7.5 High2022-03-08
CVE-2021-43298 Embedthis Software GoAhead 安全漏洞 — goahead 9.1 -2022-01-25
CVE-2021-26318 Side-channels Related to the x86 PREFETCH Instruction — All supported processors 4.7 -2021-10-13
CVE-2021-26314 AMD Speculative execution with Floating-Point Value Injection — All supported processors 5.5 -2021-06-09
CVE-2021-26313 AMD Speculative Code Store Bypass — All supported processors 5.5 -2021-06-09
CVE-2021-31403 Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 — Vaadin 4.0 Medium2021-04-23
CVE-2021-31404 Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 — Vaadin 4.0 Medium2021-04-23
CVE-2021-31406 Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 — Vaadin 4.0 Medium2021-04-23
CVE-2020-1926 Timing attack in Cookie signature verification — Apache Hive 5.9 -2021-03-16

Vulnerabilities classified as CWE-208 (通过时间差异性导致的信息暴露) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.