846 matches found
CVE-2025-66406
Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0...
GHSA-J7C9-79X7-8HPR step-ca Has Improper Authorization Check for SSH Certificate Revocation
Summary An authorized attacker can bypass authorization checks and revoke any SSH certificate issued by Step CA by using a valid revocation token. Details Step CA users can obtain SSH certificates from a few provisioners. The SSHPOP provisioner allows revocation of the SSH certificate preventing...
Smallstep step-ca 安全漏洞
Smallstep step-ca is an online certificate authority for secure, automated certificate management for DevOps from Smallstep USA. A security vulnerability exists in Smallstep step-ca versions prior to 0.29.0 that stems from improper SSH certificate revocation authorization checking, which could le...
JLSEC-2025-208 An issue was discovered in Arm Mbed TLS before 2.24.0
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock...
JLSEC-2025-209 An issue was discovered in Arm Mbed TLS before 2.24.0
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2020-8286)
The libcurl library versions 7.41.0 to and including 7.73.0 are vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. This vulnerability could allow an attacker to pass a revoked certificate as valid. This plugin only works with...
ROS-20251022-03
ProFTPD FTP server vulnerability is related to a null pointer dereferencing error in the function tlsverifycrl in ProFTPD when processing data returned by OpenSSL function skX509REVOKEDvalue when detecting an empty certificate revocation list set by the system administrator. Exploitation of the...
JLSEC-2025-25 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response...
EUVD-2007-5766
Malware in sbrugna...
EUVD-2001-0338
Malware in sbrugna...
EUVD-2012-4474
Malware in sbrugna...
EUVD-2012-3341
Malware in sbrugna...
EUVD-2019-6093
Malware in sbrugna...
EUVD-2008-2415
Malware in sbrugna...
EUVD-2010-0757
Malware in sbrugna...
EUVD-2015-4699
Malware in sbrugna...
EUVD-2020-23953
Malware in sbrugna...
EUVD-2013-5030
Malware in sbrugna...