Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 1151-1175 di 4259 risultati

Pagina 47 di 171

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2019-18222 The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.	18-02-2026	1151
MSRC Security Update	CVE-2025-38307 ASoC: Intel: avs: Verify content returned by parse_int_array()	18-02-2026	1152
MSRC Security Update	CVE-2023-42365 A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.	18-02-2026	1153
MSRC Security Update	CVE-2022-4968 netplan leaks the private key of wireguard to local users.	18-02-2026	1154
MSRC Security Update	CVE-2012-6708 jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions jQuery only deems the input to be HTML if it explicitly starts with the '<' character limiting exploitability only to attackers who can control the beginning of a string which is far less common.	18-02-2026	1155
MSRC Security Update	CVE-2025-38274 fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()	18-02-2026	1156
MSRC Security Update	CVE-2022-33967 squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.	18-02-2026	1157
MSRC Security Update	CVE-2023-42364 A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.	18-02-2026	1158
MSRC Security Update	CVE-2022-45410 When a ServiceWorker intercepted a request with `FetchEvent`, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.	18-02-2026	1159
MSRC Security Update	CVE-2025-38300 crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()	18-02-2026	1160
MSRC Security Update	CVE-2025-27810 Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.	18-02-2026	1161
MSRC Security Update	CVE-2025-21672 afs: Fix merge preference rule failure condition	18-02-2026	1162
MSRC Security Update	CVE-2025-60753 An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).	18-02-2026	1163
MSRC Security Update	CVE-2022-27536 Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.	18-02-2026	1164
MSRC Security Update	CVE-2024-50613 libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.	18-02-2026	1165
MSRC Security Update	CVE-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution	18-02-2026	1166
MSRC Security Update	CVE-2023-42366 A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.	18-02-2026	1167
MSRC Security Update	CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http	18-02-2026	1168
MSRC Security Update	CVE-2019-14197 An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.	18-02-2026	1169
MSRC Security Update	CVE-2025-38261 riscv: save the SR_SUM status over switches	18-02-2026	1170
MSRC Security Update	CVE-2025-21666 vsock: prevent null-ptr-deref in vsock_*[has_data\|has_space]	18-02-2026	1171
MSRC Security Update	CVE-2024-50614 TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.	18-02-2026	1172
MSRC Security Update	CVE-2024-3447 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()	18-02-2026	1173
MSRC Security Update	CVE-2023-24540 Improper handling of JavaScript whitespace in html/template	18-02-2026	1174
MSRC Security Update	CVE-2025-38257 s390/pkey: Prevent overflow in size calculation for memdup_user()	18-02-2026	1175