Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 626-650 di 4595 risultati

Pagina 26 di 184

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	02-06-2026	626
MSRC Security Update	CVE-2026-39834 Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh	02-06-2026	627
MSRC Security Update	CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh	02-06-2026	628
MSRC Security Update	CVE-2026-39830 Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh	02-06-2026	629
MSRC Security Update	CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh	02-06-2026	630
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	02-06-2026	631
MSRC Security Update	CVE-2026-39832 Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent	02-06-2026	632
MSRC Security Update	CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts	02-06-2026	633
MSRC Security Update	CVE-2026-46598 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent	02-06-2026	634
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	02-06-2026	635
MSRC Security Update	CVE-2026-21717 A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table. This vulnerability affects 20.x, 22.x, 24.x, and 25.x.	02-06-2026	636
MSRC Security Update	CVE-2026-46597 Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh	02-06-2026	637
MSRC Security Update	CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna	02-06-2026	638
MSRC Security Update	CVE-2026-39828 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh	02-06-2026	639
MSRC Security Update	CVE-2026-46595 Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh	02-06-2026	640
MSRC Security Update	CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh	02-06-2026	641
MSRC Security Update	CVE-2026-39824 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows	02-06-2026	642
MSRC Security Update	CVE-2025-14575 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading	02-06-2026	643
MSRC Security Update	CVE-2026-8723 qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly	02-06-2026	644
MSRC Security Update	CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	02-06-2026	645
MSRC Security Update	CVE-2025-23167 A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.	02-06-2026	646
MSRC Security Update	CVE-2026-3592 Amplification vulnerabilities via self-pointed glue records	02-06-2026	647
MSRC Security Update	CVE-2026-48959 IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward	02-06-2026	648
MSRC Security Update	CVE-2026-6324 Libsoup: libsoup: http request smuggling via unsigned to signed conversion error	02-06-2026	649
MSRC Security Update	CVE-2026-10028 Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain	02-06-2026	650