Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 476-500 di 4351 risultati

Pagina 20 di 175

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-71161 dm-verity: disable recursive forward error correction	28-02-2026	476
MSRC Security Update	CVE-2025-71160 netfilter: nf_tables: avoid chain re-validation if possible	28-02-2026	477
MSRC Security Update	CVE-2025-71154 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure	28-02-2026	478
MSRC Security Update	CVE-2025-71152 net: dsa: properly keep track of conduit reference	28-02-2026	479
MSRC Security Update	CVE-2025-71150 ksmbd: Fix refcount leak when invalid session is found on session lookup	28-02-2026	480
MSRC Security Update	CVE-2025-71147 KEYS: trusted: Fix a memory leak in tpm2_load_cmd	28-02-2026	481
MSRC Security Update	CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set	28-02-2026	482
MSRC Security Update	CVE-2025-68817 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency	28-02-2026	483
MSRC Security Update	CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use	28-02-2026	484
MSRC Security Update	CVE-2025-68340 team: Move team device type change at the end of team_port_add	28-02-2026	485
MSRC Security Update	CVE-2025-68211 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item	28-02-2026	486
MSRC Security Update	CVE-2025-40251 devlink: rate: Unset parent pointer in devl_rate_nodes_destroy	28-02-2026	487
MSRC Security Update	CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().	28-02-2026	488
MSRC Security Update	CVE-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise	28-02-2026	489
MSRC Security Update	CVE-2025-40039 ksmbd: Fix race condition in RPC handle list access	28-02-2026	490
MSRC Security Update	CVE-2023-54207 HID: uclogic: Correct devm device reference for hidinput input_dev name	28-02-2026	491
MSRC Security Update	CVE-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability	27-02-2026	492
MSRC Security Update	CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability	27-02-2026	493
Consiglio Federale CH	Risolta vulnerabilità nella libreria pgvector per PostgreSQL	27-02-2026	494
CSIRT IT	Risolta vulnerabilità nella libreria pgvector per PostgreSQL	27-02-2026	495
CSIRT IT	Vulnerabilità in prodotti ServiceNow	27-02-2026	496
Consiglio Federale CH	Vulnerabilità in prodotti ServiceNow	27-02-2026	497
MSRC Security Update	CVE-2026-21620 TFTP Path Traversal	27-02-2026	498
MSRC Security Update	CVE-2026-27571 nats-server websockets are vulnerable to pre-auth memory DoS	27-02-2026	499
MSRC Security Update	CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a\|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation.	27-02-2026	500