762 matches found
GHSA-J7C9-79X7-8HPR step-ca Has Improper Authorization Check for SSH Certificate Revocation
Summary An authorized attacker can bypass authorization checks and revoke any SSH certificate issued by Step CA by using a valid revocation token. Details Step CA users can obtain SSH certificates from a few provisioners. The SSHPOP provisioner allows revocation of the SSH certificate preventing...
Smallstep step-ca 安全漏洞
Smallstep step-ca is an online certificate authority for secure, automated certificate management for DevOps from Smallstep USA. A security vulnerability exists in Smallstep step-ca versions prior to 0.29.0 that stems from improper SSH certificate revocation authorization checking, which could le...
JLSEC-2025-209 An issue was discovered in Arm Mbed TLS before 2.24.0
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
JLSEC-2025-208 An issue was discovered in Arm Mbed TLS before 2.24.0
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock...
Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2020-8286)
The libcurl library versions 7.41.0 to and including 7.73.0 are vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. This vulnerability could allow an attacker to pass a revoked certificate as valid. This plugin only works with...
ROS-20251022-03
ProFTPD FTP server vulnerability is related to a null pointer dereferencing error in the function tlsverifycrl in ProFTPD when processing data returned by OpenSSL function skX509REVOKEDvalue when detecting an empty certificate revocation list set by the system administrator. Exploitation of the...
JLSEC-2025-25 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insu...
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response...
EUVD-2008-4659
Malware in sbrugna...
EUVD-2011-2008
Malware in sbrugna...
EUVD-2011-3191
Malware in sbrugna...
EUVD-2007-4975
Malware in sbrugna...
EUVD-2015-4699
Malware in sbrugna...
EUVD-2012-1341
Malware in sbrugna...
EUVD-2018-4431
Malware in sbrugna...
EUVD-2013-5030
Malware in sbrugna...
EUVD-2012-3341
Malware in sbrugna...
EUVD-2007-1520
Malware in sbrugna...
EUVD-2017-8468
Malware in sbrugna...