CWE-361 · Other weaknesses
Time and State
7CVEs
SortMost likely exploited
7 CVEs with CWE-361 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-7547A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.Trendmicro · Threat Discovery Appliance · 2017-04-12 | – | 92% | 2017-04-12 |
| CVE-2015-5300The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote att…Ntp · Ntp · 2017-07-21 | – | 9.1% | 2017-07-21 |
| CVE-2016-1643The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly mai…Google · Chrome · 2016-03-13 | – | 2.7% | 2016-03-13 |
| CVE-2016-1000345In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can…Bouncycastle · Bc-Java · 2018-06-04 | – | 2.6% | 2018-06-04 |
| CVE-2016-1000341In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of sig…Bouncycastle · Bc-Java · 2018-06-04 | – | 2.5% | 2018-06-04 |
| CVE-2016-7036python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.Python-Jose Project · Python-Jose · 2017-01-23 | – | 2.2% | 2017-01-23 |
| CVE-2016-7037The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signature…Emarref · Jwt · 2017-01-23 | – | 0.7% | 2017-01-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.