Все уязвимости

Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

Picsou vulnerable to login timing attack

Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint

User Attribute Enumeration when Using DaoAuthenticationProvider

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks

4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint

Mojic: Observable Timing Discrepancy in HMAC Verification

Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel

Parse Server has a login timing side-channel reveals user existence

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attac

Username Enumeration via Timing Attack

Apache HTTP Server: mod_auth_digest timing attack

Apache Tomcat: AJP secret compared in non-constant time

PyQuorum: Timing side‑channel in mul_mod

azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

net/tcp-md5: Fix MAC comparison to be constant-time

Lack of Reproducible Vulnerability Evidence in QNAP Report

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker t

Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check

OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison

Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison

Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

Kimai before 2.54.0 Username Enumeration via Timing Oracle