Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 901-925 di 4328 risultati

Pagina 37 di 174

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)	15-04-2026	901
MSRC Security Update	CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check	15-04-2026	902
MSRC Security Update	CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers	15-04-2026	903
MSRC Security Update	CVE-2025-1220 Null byte termination in hostnames	15-04-2026	904
MSRC Security Update	CVE-2026-1519 Excessive NSEC3 iterations cause high CPU load during insecure delegation validation	15-04-2026	905
MSRC Security Update	CVE-2026-33636 LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64	15-04-2026	906
MSRC Security Update	CVE-2026-33416 LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`	15-04-2026	907
MSRC Security Update	CVE-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."	15-04-2026	908
MSRC Security Update	CVE-2025-62718 Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF	15-04-2026	909
MSRC Security Update	CVE-2026-40175 Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain	15-04-2026	910
MSRC Security Update	CVE-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters	15-04-2026	911
MSRC Security Update	CVE-2026-34479 Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters	15-04-2026	912
MSRC Security Update	CVE-2026-34481 Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout	15-04-2026	913
MSRC Security Update	CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount	15-04-2026	914
MSRC Security Update	CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF	15-04-2026	915
MSRC Security Update	CVE-2026-5446 wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse	15-04-2026	916
MSRC Security Update	CVE-2026-5392 wolfSSL heap OOB read in PKCS7 SignedData streaming	15-04-2026	917
MSRC Security Update	CVE-2026-5263 URI nameConstraints not enforced in ConfirmNameConstraints()	15-04-2026	918
MSRC Security Update	CVE-2026-5460 Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3	15-04-2026	919
MSRC Security Update	CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation	15-04-2026	920
MSRC Security Update	CVE-2026-5447 Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier	15-04-2026	921
MSRC Security Update	CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.	15-04-2026	922
MSRC Security Update	CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL	15-04-2026	923
MSRC Security Update	CVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID	15-04-2026	924
MSRC Security Update	CVE-2026-5264 DTLS 1.3 ACK heap buffer overflow	15-04-2026	925