Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 1751-1775 di 3902 risultati

Pagina 71 di 157

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-38735 gve: prevent ethtool ops after shutdown	18-02-2026	1751
MSRC Security Update	CVE-2025-21490 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).	18-02-2026	1752
MSRC Security Update	CVE-2024-35870 smb: client: fix UAF in smb2_reconnect_server()	18-02-2026	1753
MSRC Security Update	CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http	18-02-2026	1754
MSRC Security Update	CVE-2025-38204 jfs: fix array-index-out-of-bounds read in add_missing_indices	18-02-2026	1755
MSRC Security Update	CVE-2025-49794 Libxml: heap use after free (uaf) leads to denial of service (dos)	18-02-2026	1756
MSRC Security Update	CVE-2022-48893 drm/i915/gt: Cleanup partial engine discovery failures	18-02-2026	1757
MSRC Security Update	CVE-2019-16276 Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.	18-02-2026	1758
MSRC Security Update	CVE-2024-57887 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()	18-02-2026	1759
MSRC Security Update	CVE-2022-35409 An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.	18-02-2026	1760
MSRC Security Update	CVE-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.	18-02-2026	1761
MSRC Security Update	CVE-2025-38351 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush	18-02-2026	1762
MSRC Security Update	CVE-2021-33198 In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.	18-02-2026	1763
MSRC Security Update	CVE-2025-37819 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()	18-02-2026	1764
MSRC Security Update	CVE-2025-32050 Libsoup: integer overflow in append_param_quoted	18-02-2026	1765
MSRC Security Update	CVE-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en	18-02-2026	1766
MSRC Security Update	CVE-2025-68371 scsi: smartpqi: Fix device resources accessed after device removal	18-02-2026	1767
MSRC Security Update	CVE-2025-38230 jfs: validate AG parameters in dbMount() to prevent crashes	18-02-2026	1768
MSRC Security Update	CVE-2023-49295 quic-go's path validation mechanism can cause denial of service	18-02-2026	1769
MSRC Security Update	CVE-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation	18-02-2026	1770
MSRC Security Update	CVE-2025-40913 Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow	18-02-2026	1771
MSRC Security Update	CVE-2025-49796 Libxml: type confusion leads to denial of service (dos)	18-02-2026	1772
MSRC Security Update	CVE-2019-16910 Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)	18-02-2026	1773
MSRC Security Update	CVE-2024-50038 netfilter: xtables: avoid NFPROTO_UNSPEC where needed	18-02-2026	1774
MSRC Security Update	CVE-2025-37963 arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users	18-02-2026	1775