CWE-361 · 7 records
7PK - Time and State
CVEs in this class
7 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
67This week | CVE-2016-7547Weaponized | A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.ctrendmicro · threat discovery appliance · CWE-361 | Critical9.8 | — | 92.7% | Apr 12, 2017 |
40Plan | CVE-2016-7036No exploit | python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.python-jose project · python-jose · CWE-361 | Critical9.8 | — | 2.1% | Jan 23, 2017 |
36Monitor | CVE-2016-1643No exploit | The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome befgoogle · chrome · CWE-361 | High8.8 | — | 2.6% | Mar 13, 2016 |
33Monitor | CVE-2015-5300No exploit | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 millisecontp · ntp · CWE-361 | High7.5 | — | 9.1% | Jul 21, 2017 |
30Monitor | CVE-2016-7037No exploit | The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, whemarref · jwt · CWE-361 | High7.5 | — | 0.7% | Jan 23, 2017 |
24Monitor | CVE-2016-1000345No exploit | In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack.bouncycastle · bc-java · CWE-361 | Medium5.9 | — | 2.5% | Jun 4, 2018 |
24Monitor | CVE-2016-1000341No exploit | In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack.bouncycastle · bc-java · CWE-361 | Medium5.9 | — | 2.5% | Jun 4, 2018 |
- CVE-2016-754767This week
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c
CriticalCVSS 9.8WeaponizedEPSS 92%trendmicro · threat discovery applianceApr 12, 2017
- CVE-2016-703640Plan
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.
CriticalCVSS 9.8No exploitEPSS 2%python-jose project · python-joseJan 23, 2017
- CVE-2016-164336Monitor
The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome bef
HighCVSS 8.8No exploitEPSS 2%google · chromeMar 13, 2016
- CVE-2015-530033Monitor
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseco
HighCVSS 7.5No exploitEPSS 9%ntp · ntpJul 21, 2017
- CVE-2016-703730Monitor
The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, wh
HighCVSS 7.5No exploitEPSS 0%emarref · jwtJan 23, 2017
- CVE-2016-100034524Monitor
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack.
MediumCVSS 5.9No exploitEPSS 2%bouncycastle · bc-javaJun 4, 2018
- CVE-2016-100034124Monitor
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack.
MediumCVSS 5.9No exploitEPSS 2%bouncycastle · bc-javaJun 4, 2018