Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2026-2050 di 5359 risultati

Pagina 82 di 215

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	03-06-2026	2026
MSRC Security Update	CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto	03-06-2026	2027
MSRC Security Update	CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http	03-06-2026	2028
MSRC Security Update	CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar	03-06-2026	2029
MSRC Security Update	CVE-2026-4948 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	03-06-2026	2030
MSRC Security Update	CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs	03-06-2026	2031
MSRC Security Update	CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.	03-06-2026	2032
MSRC Security Update	CVE-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().	03-06-2026	2033
MSRC Security Update	CVE-2026-40355 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.	03-06-2026	2034
MSRC Security Update	CVE-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.	03-06-2026	2035
MSRC Security Update	CVE-2026-39828 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh	03-06-2026	2036
MSRC Security Update	CVE-2026-41526 In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path to handle user input are affected and could be exploited. In particular, because sendInput() sends a string to a terminal, a control character such as \x01 can be used during injection.	03-06-2026	2037
MSRC Security Update	CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	03-06-2026	2038
MSRC Security Update	CVE-2026-25541 Bytes is vulnerable to integer overflow in BytesMut::reserve	03-06-2026	2039
MSRC Security Update	CVE-2024-58266 The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.	03-06-2026	2040
MSRC Security Update	CVE-2026-45803 gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection	03-06-2026	2041
MSRC Security Update	CVE-2026-41607 Apache Thrift: C++ JSON OOB read	03-06-2026	2042
MSRC Security Update	CVE-2025-5791 Users: `root` appended to group listings	03-06-2026	2043
MSRC Security Update	CVE-2025-1176 GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow	03-06-2026	2044
MSRC Security Update	CVE-2026-41606 Apache Thrift: c_glib dispatch stack overflow	03-06-2026	2045
MSRC Security Update	CVE-2026-6357 pip self-update functionality can import newly installed modules after wheel installation	03-06-2026	2046
MSRC Security Update	CVE-2025-1178 GNU Binutils ld libbfd.c bfd_putl64 memory corruption	03-06-2026	2047
MSRC Security Update	CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	03-06-2026	2048
MSRC Security Update	CVE-2025-3198 GNU Binutils objdump bucomm.c display_info memory leak	03-06-2026	2049
MSRC Security Update	CVE-2026-6238 Buffer overread in ns_printrrf with corrupted RDATA field	03-06-2026	2050