emarref records
1 published records for vendor emarref.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2016-7037No exploit | The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, whemarref · jwt · CWE-361 | High7.5 | — | 0.7% | Jan 23, 2017 |
- CVE-2016-703730Monitor
The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, wh
HighCVSS 7.5No exploitEPSS 1%emarref · jwtJan 23, 2017