phpseclib kayıtları
phpseclib üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-208 Observable Timing Discrepancy2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-834 Excessive Iteration1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-436 Interpretation Conflict1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-32935İstismar yok | phpseclib's AES-CBC unpadding susceptible to padding oracle timing attackphpseclib · phpseclib · CWE-208 | Yüksek8,2 | — | %0,4 | 19 Mar 2026 |
30İzleyin | CVE-2021-30130İstismar yok | phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.phpseclib · phpseclib · CWE-347 | Yüksek7,5 | — | %1,1 | 6 Nis 2021 |
30İzleyin | CVE-2023-27560İstismar yok | Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.phpseclib · phpseclib · CWE-835 | Yüksek7,5 | — | %0,8 | 3 Mar 2023 |
30İzleyin | CVE-2023-49316İstismar yok | In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.phpseclib · phpseclib · CWE-834 | Yüksek7,5 | — | %0,8 | 27 Kas 2023 |
30İzleyin | CVE-2024-27354İstismar yok | An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36.phpseclib · phpseclib · CWE-400 | Yüksek7,5 | — | %0,6 | 1 Mar 2024 |
30İzleyin | CVE-2024-27355İstismar yok | An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36.phpseclib · phpseclib · CWE-400 | Yüksek7,5 | — | %0,6 | 1 Mar 2024 |
30İzleyin | CVE-2023-52892İstismar yok | In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificatesphpseclib · phpseclib · CWE-436 | Yüksek7,5 | — | %0,4 | 27 Haz 2024 |
23İzleyin | CVE-2026-55599İstismar yok | phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Accessphpseclib · phpseclib · CWE-918 | Orta5,8 | — | %0,2 | 22 Haz 2026 |
14İzleyin | CVE-2026-40194İstismar yok | phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()phpseclib · phpseclib · CWE-208 | Düşük3,7 | — | %0,4 | 10 Nis 2026 |
- CVE-2026-3293532İzleyin
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
YüksekCVSS 8,2İstismar yokEPSS %0phpseclib · phpseclib19 Mar 2026
- CVE-2021-3013030İzleyin
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.
YüksekCVSS 7,5İstismar yokEPSS %1phpseclib · phpseclib6 Nis 2021
- CVE-2023-2756030İzleyin
Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.
YüksekCVSS 7,5İstismar yokEPSS %1phpseclib · phpseclib3 Mar 2023
- CVE-2023-4931630İzleyin
In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.
YüksekCVSS 7,5İstismar yokEPSS %1phpseclib · phpseclib27 Kas 2023
- CVE-2024-2735430İzleyin
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36.
YüksekCVSS 7,5İstismar yokEPSS %1phpseclib · phpseclib1 Mar 2024
- CVE-2024-2735530İzleyin
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36.
YüksekCVSS 7,5İstismar yokEPSS %1phpseclib · phpseclib1 Mar 2024
- CVE-2023-5289230İzleyin
In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates
YüksekCVSS 7,5İstismar yokEPSS %0phpseclib · phpseclib27 Haz 2024
- CVE-2026-5559923İzleyin
phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access
OrtaCVSS 5,8İstismar yokEPSS %0phpseclib · phpseclib22 Haz 2026
- CVE-2026-4019414İzleyin
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
DüşükCVSS 3,7İstismar yokEPSS %0phpseclib · phpseclib10 Nis 2026