Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2001-2025 di 5359 risultati

Pagina 81 di 215

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-33846 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	03-06-2026	2001
MSRC Security Update	CVE-2026-4224 Stack overflow parsing XML with deeply nested DTD content models	03-06-2026	2002
MSRC Security Update	CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template	03-06-2026	2003
MSRC Security Update	CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution	03-06-2026	2004
MSRC Security Update	CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution	03-06-2026	2005
MSRC Security Update	CVE-2026-3713 pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow	03-06-2026	2006
MSRC Security Update	CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution	03-06-2026	2007
MSRC Security Update	CVE-2026-2297 SourcelessFileLoader does not use io.open_code()	03-06-2026	2008
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	03-06-2026	2009
MSRC Security Update	CVE-2026-6383 Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation	03-06-2026	2010
MSRC Security Update	CVE-2025-58160 Tracing logging user input may result in poisoning logs with ANSI escape sequences	03-06-2026	2011
MSRC Security Update	CVE-2026-3832 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	03-06-2026	2012
MSRC Security Update	CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh	03-06-2026	2013
MSRC Security Update	CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509	03-06-2026	2014
MSRC Security Update	CVE-2026-37457 An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.	03-06-2026	2015
MSRC Security Update	CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509	03-06-2026	2016
MSRC Security Update	CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service	03-06-2026	2017
MSRC Security Update	CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions	03-06-2026	2018
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	03-06-2026	2019
MSRC Security Update	CVE-2025-60876 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).	03-06-2026	2020
MSRC Security Update	CVE-2025-9403 jqlang jq JSON jq_test.c run_jq_tests assertion	03-06-2026	2021
MSRC Security Update	CVE-2025-11083 GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow	03-06-2026	2022
MSRC Security Update	CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file	03-06-2026	2023
MSRC Security Update	CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail	03-06-2026	2024
MSRC Security Update	CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509	03-06-2026	2025