agentprime: CWE-385Every new CWE-385 Advisory and CVE.https://agentprime.io/phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recoveryhttps://agentprime.io/advisories/GHSA-q97c-8qh3-fpc6/https://agentprime.io/advisories/GHSA-q97c-8qh3-fpc6/phpseclib/phpseclib <3.0.57 || >=4.0.0, <4.0.1, fixed in 3.0.57, 4.0.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 21:24:29 GMTPackagistphpseclib/phpseclibfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKAhttps://agentprime.io/advisories/GHSA-fp46-6vfw-gc9c/https://agentprime.io/advisories/GHSA-fp46-6vfw-gc9c/github.com/free5gc/ausf <1.4.5, fixed in 1.4.5. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 28 Aug 2026 22:26:16 GMTGogithub.com/free5gc/ausfPHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oraclehttps://agentprime.io/advisories/GHSA-5739-39v2-5754/https://agentprime.io/advisories/GHSA-5739-39v2-5754/web-token/jwt-library <3.4.10 || >=4.0.0, <4.0.7 || >=4.1.0, <4.1.7, fixed in 3.4.10, 4.0.7, 4.1.7. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 18 Jun 2026 21:09:56 GMTPackagistweb-token/jwt-libraryCVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert timing channelhttps://agentprime.io/advisories/CVE-2026-6478/https://agentprime.io/advisories/CVE-2026-6478/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:13 GMTCVEBouncy Castle Has Covert Timing Channel Vulnerabilityhttps://agentprime.io/advisories/GHSA-p93r-85wp-75v3/https://agentprime.io/advisories/GHSA-p93r-85wp-75v3/org.bouncycastle:bcprov-jdk14 >=1.71, <1.84, fixed in 1.84. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 17 Apr 2026 18:31:50 GMTMavenorg.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18org.bouncycastle:bcprov-jdk18onCVE-2025-69893: A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0…https://agentprime.io/advisories/CVE-2025-69893/https://agentprime.io/advisories/CVE-2025-69893/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 00:00:00 GMTCVECVE-2025-66442: In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature.https://agentprime.io/advisories/CVE-2025-66442/https://agentprime.io/advisories/CVE-2025-66442/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:00:00 GMTCVEOpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapperhttps://agentprime.io/advisories/GHSA-6pfc-6m7w-m8fx/https://agentprime.io/advisories/GHSA-6pfc-6m7w-m8fx/openclaw <2026.3.28, fixed in 2026.3.28. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 31 Mar 2026 23:59:53 GMTnpmopenclawvLLM is vulnerable to timing attack at bearer authhttps://agentprime.io/advisories/GHSA-wr9h-g72x-mwhm/https://agentprime.io/advisories/GHSA-wr9h-g72x-mwhm/vllm <0.11.0, fixed in 0.11.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 07 Oct 2025 17:24:47 GMTPyPIvllmCVE-2025-9231: Timing side-channel in SM2 algorithm on 64 bit ARMhttps://agentprime.io/advisories/CVE-2025-9231/https://agentprime.io/advisories/CVE-2025-9231/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 13:17:12 GMTCVETiming Attack Vulnerability in SCRAM Authenticationhttps://agentprime.io/advisories/GHSA-3wfh-36rx-9537/https://agentprime.io/advisories/GHSA-3wfh-36rx-9537/com.ongres.scram:scram-common <3.2, fixed in 3.2. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 16 Sep 2025 22:20:08 GMTMavencom.ongres.scram:scram-commonCVE-2025-49087: In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.https://agentprime.io/advisories/CVE-2025-49087/https://agentprime.io/advisories/CVE-2025-49087/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Jul 2025 00:00:00 GMTCVECVE-2025-7396: Curve25519 Blindinghttps://agentprime.io/advisories/CVE-2025-7396/https://agentprime.io/advisories/CVE-2025-7396/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Jul 2025 22:51:18 GMTCVEFile Browser’s insecure JWT handling can lead to session replay attacks after logouthttps://agentprime.io/advisories/GHSA-7xwp-2cpp-p8r7/https://agentprime.io/advisories/GHSA-7xwp-2cpp-p8r7/github.com/filebrowser/filebrowser <=2.39.0, no fixed version yet. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 16 Jul 2025 14:09:28 GMTGogithub.com/filebrowser/filebrowsergithub.com/filebrowser/filebrowser/v2CVE-2025-27587: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using…https://agentprime.io/advisories/CVE-2025-27587/https://agentprime.io/advisories/CVE-2025-27587/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 00:00:00 GMTCVEPost-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operationshttps://agentprime.io/advisories/GHSA-q65w-fg65-79f4/https://agentprime.io/advisories/GHSA-q65w-fg65-79f4/postquantum-feldman-vss <=0.8.0b2, no fixed version yet. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 14 Mar 2025 19:55:10 GMTPyPIpostquantum-feldman-vssCVE-2024-13176: Timing side-channel in ECDSA signature computationhttps://agentprime.io/advisories/CVE-2024-13176/https://agentprime.io/advisories/CVE-2024-13176/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jan 2025 13:29:57 GMTCVECVE-2025-0306: Ruby: openssl: ruby marvin attackhttps://agentprime.io/advisories/CVE-2025-0306/https://agentprime.io/advisories/CVE-2025-0306/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 04:05:42 GMTCVEDevolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplicationshttps://agentprime.io/advisories/GHSA-j6vm-4r7g-x4gr/https://agentprime.io/advisories/GHSA-j6vm-4r7g-x4gr/Devolutions.XTS.NET <2024.11.26, fixed in 2024.11.26. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 27 Nov 2024 19:01:01 GMTNuGetDevolutions.XTS.NETCVE-2023-46809: Node: Node.js versions which bundle an unpatched version of OpenSSL or run against a…https://agentprime.io/advisories/CVE-2023-46809/https://agentprime.io/advisories/CVE-2023-46809/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Sep 2024 16:03:32 GMTCVECVE-2024-45192: An issue was discovered in Matrix libolm through 3.2.16.https://agentprime.io/advisories/CVE-2024-45192/https://agentprime.io/advisories/CVE-2024-45192/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Aug 2024 00:00:00 GMTCVECVE-2024-36405: Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other optionshttps://agentprime.io/advisories/CVE-2024-36405/https://agentprime.io/advisories/CVE-2024-36405/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 12:47:17 GMTCVEObservable Timing Discrepancy in pypqchttps://agentprime.io/advisories/GHSA-hvh4-5qr6-3v7r/https://agentprime.io/advisories/GHSA-hvh4-5qr6-3v7r/pypqc >=0.0.4, <=0.0.6.2, no fixed version yet. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 05 Jun 2024 16:56:35 GMTPyPIpypqcCVE-2024-26306: iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations.https://agentprime.io/advisories/CVE-2024-26306/https://agentprime.io/advisories/CVE-2024-26306/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 00:00:00 GMTCVECVE-2023-33855: IBM Common Cryptographic Architecture information disclosurehttps://agentprime.io/advisories/CVE-2023-33855/https://agentprime.io/advisories/CVE-2023-33855/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Mar 2024 14:04:37 GMTCVECVE-2024-25964: Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.https://agentprime.io/advisories/CVE-2024-25964/https://agentprime.io/advisories/CVE-2024-25964/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Mar 2024 08:13:44 GMTCVECVE-2024-2236: Libgcrypt: vulnerable to marvin attackhttps://agentprime.io/advisories/CVE-2024-2236/https://agentprime.io/advisories/CVE-2024-2236/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Mar 2024 22:07:16 GMTCVEm2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657https://agentprime.io/advisories/GHSA-944j-8ch6-rf6x/https://agentprime.io/advisories/GHSA-944j-8ch6-rf6x/m2crypto <=0.40.1, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:30:31 GMTPyPIm2cryptoPython Cryptography package vulnerable to Bleichenbacher timing oracle attackhttps://agentprime.io/advisories/GHSA-3ww4-gg4f-jr7f/https://agentprime.io/advisories/GHSA-3ww4-gg4f-jr7f/cryptography <42.0.0, fixed in 42.0.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:30:31 GMTPyPIcryptographyCVE-2024-23170: An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2.https://agentprime.io/advisories/CVE-2024-23170/https://agentprime.io/advisories/CVE-2024-23170/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jan 2024 00:00:00 GMTCVEMinerva timing attack on P-256 in python-ecdsahttps://agentprime.io/advisories/GHSA-wj6h-64fc-37mp/https://agentprime.io/advisories/GHSA-wj6h-64fc-37mp/ecdsa *, no fixed version yet. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 22 Jan 2024 21:35:27 GMTPyPIecdsaMarvin Attack: potential key recovery through timing sidechannelshttps://agentprime.io/advisories/GHSA-4grx-2x9w-596c/https://agentprime.io/advisories/GHSA-4grx-2x9w-596c/rsa >=0.0.0-0, no fixed version yet. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 22 Nov 2023 12:00:00 GMTcrates.iorsaCVE-2023-3640: Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…https://agentprime.io/advisories/CVE-2023-3640/https://agentprime.io/advisories/CVE-2023-3640/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 15:19:29 GMTCVECVE-2020-35166: Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…https://agentprime.io/advisories/CVE-2020-35166/https://agentprime.io/advisories/CVE-2020-35166/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Jul 2022 19:25:46 GMTCVECVE-2020-35164: Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…https://agentprime.io/advisories/CVE-2020-35164/https://agentprime.io/advisories/CVE-2020-35164/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Jul 2022 19:25:40 GMTCVECVE-2020-29506: Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…https://agentprime.io/advisories/CVE-2020-29506/https://agentprime.io/advisories/CVE-2020-29506/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Jul 2022 19:25:21 GMTCVECovert Timing Channel in Apache CXFhttps://agentprime.io/advisories/GHSA-qc2p-q7x9-v64p/https://agentprime.io/advisories/GHSA-qc2p-q7x9-v64p/org.apache.cxf.karaf:apache-cxf <3.0.13 || >=3.1.0, <3.1.10, fixed in 3.0.13, 3.1.10. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 13 May 2022 01:09:21 GMTMavenorg.apache.cxf.karaf:apache-cxfCVE-2022-24409: Dell BSAFE SSL-J: Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may…https://agentprime.io/advisories/CVE-2022-24409/https://agentprime.io/advisories/CVE-2022-24409/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Feb 2022 21:30:09 GMTCVETiming attacks in python-rsahttps://agentprime.io/advisories/GHSA-xrx6-fmxq-rjj2/https://agentprime.io/advisories/GHSA-xrx6-fmxq-rjj2/rsa >=2.1, <4.7, fixed in 4.7. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Apr 2021 17:35:15 GMTPyPIrsaCVE-2020-25657: m2crypto: A flaw was found in all released versions of m2crypto…https://agentprime.io/advisories/CVE-2020-25657/https://agentprime.io/advisories/CVE-2020-25657/Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Jan 2021 14:33:02 GMTCVECVE-2020-14341: The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the u…https://agentprime.io/advisories/CVE-2020-14341/https://agentprime.io/advisories/CVE-2020-14341/Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Jan 2021 14:23:31 GMTCVERSA decryption vulnerable to Bleichenbacher timing vulnerabilityhttps://agentprime.io/advisories/GHSA-hggm-jpg3-v476/https://agentprime.io/advisories/GHSA-hggm-jpg3-v476/cryptography <3.2, fixed in 3.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2020 20:33:13 GMTPyPIcryptographyCVE-2019-19338: Observable discrepancy in [UNKNOWN] Linux Kernelhttps://agentprime.io/advisories/CVE-2019-19338/https://agentprime.io/advisories/CVE-2019-19338/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2020 16:04:00 GMTCVECVE-2019-3732: Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior…https://agentprime.io/advisories/CVE-2019-3732/https://agentprime.io/advisories/CVE-2019-3732/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Sep 2019 21:48:40 GMTCVECVE-2016-7056: openssl: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious…https://agentprime.io/advisories/CVE-2016-7056/https://agentprime.io/advisories/CVE-2016-7056/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Sep 2018 16:00:00 GMTCVECVE-2018-10846: [UNKNOWN] gnutls: A cache-based side channel in GnuTLS implementation that leads to plain text recovery in…https://agentprime.io/advisories/CVE-2018-10846/https://agentprime.io/advisories/CVE-2018-10846/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Aug 2018 13:00:00 GMTCVECVE-2018-10845: [UNKNOWN] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky…https://agentprime.io/advisories/CVE-2018-10845/https://agentprime.io/advisories/CVE-2018-10845/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Aug 2018 13:00:00 GMTCVECVE-2018-10844: [UNKNOWN] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky…https://agentprime.io/advisories/CVE-2018-10844/https://agentprime.io/advisories/CVE-2018-10844/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Aug 2018 13:00:00 GMTCVECVE-2017-2624: xorg-x11-server: It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the…https://agentprime.io/advisories/CVE-2017-2624/https://agentprime.io/advisories/CVE-2017-2624/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jul 2018 18:00:00 GMTCVE