HOMEVULNERABILITIESVENDORSEmarref

EmarrefCVEs & Vulnerabilities

1 CVEs affecting Emarref products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

jwt 1
CVE-2016-7037HIGH

The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signatures via a timing attack.

23 Jan 2017
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database