Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 426-450 di 4595 risultati

Pagina 18 di 184

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions	03-06-2026	426
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	03-06-2026	427
MSRC Security Update	CVE-2025-60876 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).	03-06-2026	428
MSRC Security Update	CVE-2025-9403 jqlang jq JSON jq_test.c run_jq_tests assertion	03-06-2026	429
MSRC Security Update	CVE-2025-11083 GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow	03-06-2026	430
MSRC Security Update	CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file	03-06-2026	431
MSRC Security Update	CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail	03-06-2026	432
MSRC Security Update	CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509	03-06-2026	433
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	03-06-2026	434
MSRC Security Update	CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto	03-06-2026	435
MSRC Security Update	CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http	03-06-2026	436
MSRC Security Update	CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar	03-06-2026	437
MSRC Security Update	CVE-2026-4948 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	03-06-2026	438
MSRC Security Update	CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs	03-06-2026	439
MSRC Security Update	CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.	03-06-2026	440
MSRC Security Update	CVE-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().	03-06-2026	441
MSRC Security Update	CVE-2026-40355 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.	03-06-2026	442
MSRC Security Update	CVE-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.	03-06-2026	443
MSRC Security Update	CVE-2026-39828 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh	03-06-2026	444
MSRC Security Update	CVE-2026-41526 In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path to handle user input are affected and could be exploited. In particular, because sendInput() sends a string to a terminal, a control character such as \x01 can be used during injection.	03-06-2026	445
MSRC Security Update	CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	03-06-2026	446
MSRC Security Update	CVE-2026-25541 Bytes is vulnerable to integer overflow in BytesMut::reserve	03-06-2026	447
MSRC Security Update	CVE-2024-58266 The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.	03-06-2026	448
MSRC Security Update	CVE-2026-45803 gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection	03-06-2026	449
MSRC Security Update	CVE-2025-5791 Users: `root` appended to group listings	03-06-2026	450