Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

OpenSSL OpenSSLTiming Side-Channel in Scalar Multiplication for Non-NIST EC Curves

Risk 21
Severity
3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing.

1 / 5
Source: Launchpad
First published (updated )
CVE-2026-54872

redhat/jbcs-httpd24-aprPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey

Risk 23
Severity
3.7
Infoleak
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

In situations where an attacker receives automated notification of the ...

1 / 5
Source: Debian
First published (updated )
CVE-2019-1563

OpenSSL OpenSSLRaccoon attack

Risk 23
Severity
3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Last updated 18 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2020-1968

OpenSSL OpenSSLLast updated 24 July 2024

Risk 23
Severity
3.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-4000

redhat/opensslInput Validation

Risk 15
Severity
2.6
Input Validation
AV:N/AC:H/Au:N/C:N/I:N/A:P

If client authentication is used, then a server can crash with a segmentation fault in the event of a DHE ciphersuite being selected and a zero length ClientKeyExchange (CKE) message being sent by the client. This could be exploited in a denial of service attack.

This issue affects OpenSSL version 1.0.2, and is fixed in version 1.0.2a.

Acknowledgements:

Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Matt Caswell of the OpenSSL development team as the original reporter.

1 / 2
First published (updated )
CVE-2015-1787

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203