agnivade vulnerabilities

Products

• github.com/agnivade/easy-scrypt 1

Latest agnivade CVEs

Newest publication first

1. CVE-2014-125055 agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancy

   Published 2023-01-07

   Medium·CVSS 5.3 EPSS 0.77%

   A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is tol...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.