Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3226-3250 di 3996 risultati

Pagina 130 di 160

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2024-56596 jfs: fix array-index-out-of-bounds in jfs_readdir	18-02-2026	3226
MSRC Security Update	CVE-2024-47739 padata: use integer wrap around to prevent deadlock on seq_nr overflow	18-02-2026	3227
MSRC Security Update	CVE-2025-21941 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params	18-02-2026	3228
MSRC Security Update	CVE-2024-31852 LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we don't have strong objections for a CVE to be created ... It does seem that the likelihood of this miscompile enabling an exploit remains very low because the miscompile resulting in this JOP gadget is such that the function is most likely to crash on most valid inputs to the function. So if this function is covered by any testing the miscompile is most likely to be discovered before the binary is shipped to production."	18-02-2026	3229
MSRC Security Update	CVE-2024-58083 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()	18-02-2026	3230
MSRC Security Update	CVE-2025-38145 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()	18-02-2026	3231
MSRC Security Update	CVE-2025-37878 perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init	18-02-2026	3232
MSRC Security Update	CVE-2025-58754 Axios is vulnerable to DoS attack through lack of data size check	18-02-2026	3233
MSRC Security Update	CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3 an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token causing the unwrapped token to appear truncated to the application.	18-02-2026	3234
MSRC Security Update	CVE-2025-38039 net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled	18-02-2026	3235
MSRC Security Update	CVE-2023-30589 The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3 only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16 v18 and v20	18-02-2026	3236
MSRC Security Update	CVE-2024-36013 Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()	18-02-2026	3237
MSRC Security Update	CVE-2025-68324 scsi: imm: Fix use-after-free bug caused by unfinished delayed work	18-02-2026	3238
MSRC Security Update	CVE-2025-38149 net: phy: clear phydev->devlink when the link is deleted	18-02-2026	3239
MSRC Security Update	CVE-2023-3817 Excessive time spent checking DH q parameter value	18-02-2026	3240
MSRC Security Update	CVE-2024-50036 net: do not delay dst_entries_add() in dst_release()	18-02-2026	3241
MSRC Security Update	CVE-2024-56626 ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write	18-02-2026	3242
MSRC Security Update	CVE-2024-50061 i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition	18-02-2026	3243
MSRC Security Update	CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	18-02-2026	3244
MSRC Security Update	CVE-2025-37992 net_sched: Flush gso_skb list too during ->change()	18-02-2026	3245
MSRC Security Update	CVE-2023-6546 Kernel: gsm multiplexing race condition leads to privilege escalation	18-02-2026	3246
MSRC Security Update	CVE-2023-4504 OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow	18-02-2026	3247
MSRC Security Update	CVE-2024-38541 of: module: add buffer overflow check in of_modalias()	18-02-2026	3248
MSRC Security Update	CVE-2025-27152 Possible SSRF and Credential Leakage via Absolute URL in axios Requests	18-02-2026	3249
MSRC Security Update	CVE-2025-38075 scsi: target: iscsi: Fix timeout on deleted connection	18-02-2026	3250