sigstore has insufficient validation of integration timestamp during verification

SummaryVersions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the "integration time" present in "v2" and "v3" bundles during the verification flow: the "integration time" is verified if a source of signed time such as an inclusion promise is present, bu...

CVE-2025-23310

creationtimestamp| type| source ---|---|--- 2025-08-05 11:28:19+00:00| seen| https://poliverso.org/objects/0477a01e-4c41e1f5-06704c34bb3024e5 2025-08-06 13:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqf2hi26g2p 2025-08-06 14:05:55+00:00| seen|...

CVE-2025-4857

creationtimestamp| type| source ---|---|--- 2025-05-31 11:40:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqho24zdplc2 2025-05-31 14:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhwigwwnw2q...

CVE-2025-4767

creationtimestamp| type| source ---|---|--- 2025-05-16 09:34:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16664 2025-05-16 13:03:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpc3nxgql424...

Configure The ntpd Service Properly

In the cluster scenario, the time of servers must be accurate and consistent. For example, if the server time is inconsistent, the data generated by different servers may be sorted or compared inaccurately. Even if you run the date command to set the time of all servers to the same value, the tim...

CVE-2024-52043

creationtimestamp| type| source ---|---|--- 2024-11-06 07:56:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113434937936686865 2024-11-06 09:58:56+00:00| seen| https://t.me/cvedetector/9997...

NetScaler NTP sync failure when NTP server Root Dispersion value greater that 1 second

NetScaler NTP sync failure when Root Dispersion value is larger than 1 second. Dispersion isthe maximum difference recorded between the NTP client and the NTP serverrecorded in seconds. Root Dispersion measures the maximum amount of variance between the NTP server and its known time source. If...

UBUNTU-CVE-2021-46873

WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently...

CVE-2021-27905

creationtimestamp| type| source ---|---|--- 2021-04-26 11:02:21+00:00| seen| https://t.me/CyberSecurityTechnologies/3219 2021-05-22 02:46:56+00:00| seen| https://t.me/pwnwikizhchannel/498 2022-07-06 05:30:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3213 2023-04-27...

[SECURITY] Fedora 26 Update: ntp-4.2.8p10-1.fc26

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...

FreeBSD-SA-16:16.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:16.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2016-04-29 Credits: Network Time...

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-34.fc23

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 21 Update: ntp-4.2.6p5-30.fc21

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:02.ntpd.asc ADV FreeBSD-SA-10:02.ntpd.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:02.ntpd.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

CVE-2006-1117: Undefined Security Weakness

nCipher firmware before V10, as used by 1 nShield, 2 nForce, 3 netHSM, 4 payShield, 5 SecureDB, 6 DSE200 Document Sealing Engine, 7 Time Source Master Clock TSMC, and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote...