CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
751 vulnerabilities with CWE-203
CVE-2023-21298
HIGH
Android < 14.0 - Installed Application Disclosure via Slice Side Channel
CVSS 7.8
CVE-2023-21296
MEDIUM
Android < 14.0 - Local Privilege Escalation via App Installation Side Channel
CVSS 5.5
CVE-2023-21293
MEDIUM
Android < 14.0 - Unauthenticated App Installation Status Disclosure via PackageManagerNative Side Channel
CVSS 5.5
CVE-2023-5722
MEDIUM
Firefox < 119.0 - Information Disclosure via Opaque Response Size and Vary Header
CVSS 5.3
CVE-2023-36127
HIGH
PHPJabbers Appointment Scheduler 3.0 - Info Disclosure
CVSS 7.5
CVE-2023-43623
MEDIUM
Mendix <V5.4.0, <V3.7.3, <V4.1.3 - Info Disclosure
CVSS 5.3
CVE-2023-38871
MEDIUM
gugoan Economizzer <0.9-beta1 - Info Disclosure
CVSS 5.3
CVE-2023-44216
MEDIUM
Canonical Ubuntu Linux - Information Disclosure
CVSS 5.3
CVE-2023-25529
HIGH
NVIDIA DGX H100 and A100 BMC < 23.08.18 - Unauthenticated Session Token Leak via Timing Discrepancy
CVSS 8.0
CVE-2023-4095
MEDIUM
Arconte Aurea 1.5.0.0 - Info Disclosure
CVSS 5.3
CVE-2023-41885
MEDIUM
piccolo < 0.121.0 - User Enumeration via BaseUser.login
CVSS 5.3
CVE-2023-3221
MEDIUM
Password Recovery Plugin 1.2 for Roundcube - User Enumeration via Password Recovery Function
CVSS 5.3
CVE-2023-39522
MEDIUM
authentik <2023.5.6 and 2023.6.0-2023.6.2 - Username Enumeration via Recovery Flow
CVSS 5.3
CVE-2023-40756
CRITICAL
PHPJabbers Callback Widget v1.0 - Info Disclosure
CVSS 9.8
CVE-2023-33850
HIGH
IBM TXSeries for Multiplatform - Timing-Based Side Channel in RSA Decryption
CVSS 7.5
CVE-2023-40021
MEDIUM
Oppia 1.1.0-3.3.2 - Observable Timing Discrepancy in CSRF Token Validation
CVSS 5.3
CVE-2023-40343
MEDIUM
Jenkins Tuleap Authentication Plugin < 1.1.20 - Authentication Token Timing Attack
CVSS 5.9
CVE-2023-20569
MEDIUM
Fedora - Information Disclosure
CVSS 4.7
CVE-2023-20583
MEDIUM
AMD Processors - Power Side-Channel Information Disclosure via Cache Line Monitoring
CVSS 4.7
CVE-2023-3462
MEDIUM
HashiCorp Vault < 1.13.5 - User Enumeration via LDAP Auth Method
CVSS 5.3
CVE-2023-37217
MEDIUM
Tadiran Telecom Aeonix - Observable Response Discrepancy
CVSS 5.3
CVE-2023-3897
MEDIUM
SureMDM On-premise <6.31 - Info Disclosure
CVSS 4.8
CVE-2023-3640
HIGH
Linux Kernel - Unauthorized Memory Access via Per-CPU Entry Area Mapping
CVSS 7.0
CVE-2023-34669
HIGH
TOTOLINK CP300+ V5.2cu.7594 - Denial of Service via RebootSystem Function
CVSS 7.5
CVE-2023-20575
MEDIUM
AMD EPYC Firmware - Authenticated Power Side-Channel Information Leak via Power Reporting
CVSS 6.5
Details
Vulnerabilities
751