JP
Vendor
Jose-php Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-5430 | JO Jose-php Jose-php Project | 5.3 | Sep 3 | The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote… |
| CVE-2016-5429 | JO Jose-php Jose-php Project | 3.7 | Sep 3 | jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack,… |