Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3726-3750 di 3995 risultati

Pagina 150 di 160

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2024-49907 drm/amd/display: Check null pointers before using dc->clk_mgr	18-02-2026	3726
MSRC Security Update	CVE-2025-21731 nbd: don't allow reconnect after disconnect	18-02-2026	3727
MSRC Security Update	CVE-2024-6174 When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.	18-02-2026	3728
MSRC Security Update	CVE-2021-22918 Node.js before 16.4.1 14.17.2 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().	18-02-2026	3729
MSRC Security Update	CVE-2023-28938 Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.	18-02-2026	3730
MSRC Security Update	CVE-2024-46981 Redis' Lua library commands may lead to remote code execution	18-02-2026	3731
MSRC Security Update	CVE-2024-54458 scsi: ufs: bsg: Set bsg_queue to NULL after removal	18-02-2026	3732
MSRC Security Update	CVE-2023-24531 Output of "go env" does not sanitize values in cmd/go	18-02-2026	3733
MSRC Security Update	CVE-2023-28320 A denial of service vulnerability exists in curl	18-02-2026	3734
MSRC Security Update	CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing	18-02-2026	3735
MSRC Security Update	CVE-2025-27423 Improper Input Validation in Vim	18-02-2026	3736
MSRC Security Update	CVE-2023-28736 Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.	18-02-2026	3737
MSRC Security Update	CVE-2025-22104 ibmvnic: Use kernel helpers for hex dumps	18-02-2026	3738
MSRC Security Update	CVE-2023-52979 squashfs: harden sanity check in squashfs_read_xattr_id_table	18-02-2026	3739
MSRC Security Update	CVE-2022-23806 Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.	18-02-2026	3740
MSRC Security Update	CVE-2024-27304 pgx SQL Injection via Protocol Message Size Overflow	18-02-2026	3741
MSRC Security Update	CVE-2025-21729 wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion	18-02-2026	3742
MSRC Security Update	CVE-2024-57975 btrfs: do proper folio cleanup when run_delalloc_nocow() failed	18-02-2026	3743
MSRC Security Update	CVE-2025-32989 Gnutls: vulnerability in gnutls sct extension parsing	18-02-2026	3744
MSRC Security Update	CVE-2020-25657 A flaw was found in all released versions of m2crypto where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.	18-02-2026	3745
MSRC Security Update	CVE-2024-26982 Squashfs: check the inode number is not the invalid value of zero	18-02-2026	3746
MSRC Security Update	CVE-2024-57852 firmware: qcom: scm: smc: Handle missing SCM device	18-02-2026	3747
MSRC Security Update	CVE-2024-28110 Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials	18-02-2026	3748
MSRC Security Update	CVE-2022-43552 A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.	18-02-2026	3749
MSRC Security Update	CVE-2016-9179 It was found that Lynx doesn't parse the authority component of the URL correctly	18-02-2026	3750