Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 6001-6025 di 6124 risultati

Pagina 241 di 245

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-33940 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial	15-04-2026	6001
MSRC Security Update	CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509	15-04-2026	6002
MSRC Security Update	CVE-2026-33939 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation	15-04-2026	6003
MSRC Security Update	CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options	15-04-2026	6004
MSRC Security Update	CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block	15-04-2026	6005
MSRC Security Update	CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input	15-04-2026	6006
MSRC Security Update	CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)	15-04-2026	6007
MSRC Security Update	CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check	15-04-2026	6008
MSRC Security Update	CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers	15-04-2026	6009
MSRC Security Update	CVE-2025-1220 Null byte termination in hostnames	15-04-2026	6010
MSRC Security Update	CVE-2026-1519 Excessive NSEC3 iterations cause high CPU load during insecure delegation validation	15-04-2026	6011
MSRC Security Update	CVE-2026-33636 LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64	15-04-2026	6012
MSRC Security Update	CVE-2026-33416 LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`	15-04-2026	6013
MSRC Security Update	CVE-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."	15-04-2026	6014
MSRC Security Update	CVE-2025-62718 Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF	15-04-2026	6015
MSRC Security Update	CVE-2026-40175 Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain	15-04-2026	6016
MSRC Security Update	CVE-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters	15-04-2026	6017
MSRC Security Update	CVE-2026-34479 Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters	15-04-2026	6018
MSRC Security Update	CVE-2026-34481 Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout	15-04-2026	6019
MSRC Security Update	CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount	15-04-2026	6020
MSRC Security Update	CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF	15-04-2026	6021
MSRC Security Update	CVE-2026-5446 wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse	15-04-2026	6022
MSRC Security Update	CVE-2026-5392 wolfSSL heap OOB read in PKCS7 SignedData streaming	15-04-2026	6023
MSRC Security Update	CVE-2026-5263 URI nameConstraints not enforced in ConfirmNameConstraints()	15-04-2026	6024
MSRC Security Update	CVE-2026-5460 Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3	15-04-2026	6025