3+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
3 results for "CWE-208"
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times …
Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An …
Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information …
Free website and port scanning — find vulnerabilities before attackers do.