Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 351-375 di 4364 risultati

Pagina 15 di 175

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-28419 Vim has Heap-based Buffer Underflow in Emacs tags parsing	03-03-2026	351
MSRC Security Update	CVE-2026-28418 Vim has Heap-based Buffer Overflow in Emacs tags parsing	03-03-2026	352
MSRC Security Update	CVE-2026-28420 Vim has Heap-based Buffer Overflow and OOB Read in :terminal	03-03-2026	353
MSRC Security Update	CVE-2026-28421 Vim has a heap-buffer-overflow and a segmentation fault	03-03-2026	354
MSRC Security Update	CVE-2026-28417 Vim has OS Command Injection in netrw	03-03-2026	355
MSRC Security Update	CVE-2025-71162 dmaengine: tegra-adma: Fix use-after-free	03-03-2026	356
MSRC Security Update	CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set	03-03-2026	357
MSRC Security Update	CVE-2025-68817 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency	03-03-2026	358
MSRC Security Update	CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a\|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation.	03-03-2026	359
MSRC Security Update	CVE-2025-11563 wcurl path traversal with percent-encoded slashes	03-03-2026	360
MSRC Security Update	CVE-2025-62878 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern	03-03-2026	361
MSRC Security Update	CVE-2025-61145 libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.	03-03-2026	362
MSRC Security Update	CVE-2026-21620 TFTP Path Traversal	03-03-2026	363
MSRC Security Update	CVE-2026-27199 Werkzeug safe_join() allows Windows special device names	03-03-2026	364
MSRC Security Update	CVE-2026-23224 erofs: fix UAF issue for file-backed mounts w/ directio option	03-03-2026	365
MSRC Security Update	CVE-2025-71237 nilfs2: Fix potential block overflow that cause system hang	03-03-2026	366
MSRC Security Update	CVE-2026-23220 ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths	03-03-2026	367
MSRC Security Update	CVE-2026-23228 smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()	03-03-2026	368
MSRC Security Update	CVE-2025-71230 hfs: ensure sb->s_fs_info is always cleaned up	03-03-2026	369
MSRC Security Update	CVE-2026-23222 crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly	03-03-2026	370
MSRC Security Update	CVE-2026-1979 mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free	03-03-2026	371
MSRC Security Update	CVE-2026-23217 riscv: trace: fix snapshot deadlock with sbi ecall	03-03-2026	372
MSRC Security Update	CVE-2025-15079 libssh global known_hosts override	03-03-2026	373
MSRC Security Update	CVE-2025-15224 libssh key passphrase bypass without agent set	03-03-2026	374
MSRC Security Update	CVE-2023-45229 Out-of-Bounds Read in EDK II Network Package	03-03-2026	375