Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 701-725 di 4149 risultati

Pagina 29 di 166

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-2673 OpenSSL TLS 1.3 server may choose unexpected key agreement group	15-04-2026	701
MSRC Security Update	CVE-2026-32287 Infinite loop in github.com/antchfx/xpath	15-04-2026	702
MSRC Security Update	CVE-2026-32777	15-04-2026	703
MSRC Security Update	CVE-2026-4739 Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK	15-04-2026	704
MSRC Security Update	CVE-2026-32778	15-04-2026	705
MSRC Security Update	CVE-2026-32776	15-04-2026	706
MSRC Security Update	CVE-2026-4176 Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib	15-04-2026	707
MSRC Security Update	CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.	15-04-2026	708
MSRC Security Update	CVE-2026-27139 FileInfo can escape from a Root in os	15-04-2026	709
MSRC Security Update	CVE-2025-14523 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)	15-04-2026	710
MSRC Security Update	CVE-2026-33940 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial	15-04-2026	711
MSRC Security Update	CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509	15-04-2026	712
MSRC Security Update	CVE-2026-33939 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation	15-04-2026	713
MSRC Security Update	CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options	15-04-2026	714
MSRC Security Update	CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block	15-04-2026	715
MSRC Security Update	CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input	15-04-2026	716
MSRC Security Update	CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)	15-04-2026	717
MSRC Security Update	CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check	15-04-2026	718
MSRC Security Update	CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers	15-04-2026	719
MSRC Security Update	CVE-2025-1220 Null byte termination in hostnames	15-04-2026	720
MSRC Security Update	CVE-2026-1519 Excessive NSEC3 iterations cause high CPU load during insecure delegation validation	15-04-2026	721
MSRC Security Update	CVE-2026-33636 LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64	15-04-2026	722
MSRC Security Update	CVE-2026-33416 LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`	15-04-2026	723
MSRC Security Update	CVE-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."	15-04-2026	724
MSRC Security Update	CVE-2025-62718 Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF	15-04-2026	725