Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Simplito Subscribe
Filtered by product Elliptic-php
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10764 1 Simplito 1 Elliptic-php 2020-08-24 5.8 MEDIUM 7.4 HIGH
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve which might allow practical recovery of the long-term private key.