Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2151-2175 di 5359 risultati

Pagina 87 di 215

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-41080 libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.	02-06-2026	2151
MSRC Security Update	CVE-2026-42506 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html	02-06-2026	2152
MSRC Security Update	CVE-2026-27136 Invoking duplicate attributes can cause XSS in golang.org/x/net/html	02-06-2026	2153
MSRC Security Update	CVE-2026-39833 Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent	02-06-2026	2154
MSRC Security Update	CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html	02-06-2026	2155
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	02-06-2026	2156
MSRC Security Update	CVE-2026-39834 Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh	02-06-2026	2157
MSRC Security Update	CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh	02-06-2026	2158
MSRC Security Update	CVE-2026-39830 Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh	02-06-2026	2159
MSRC Security Update	CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh	02-06-2026	2160
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	02-06-2026	2161
MSRC Security Update	CVE-2026-39832 Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent	02-06-2026	2162
MSRC Security Update	CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts	02-06-2026	2163
MSRC Security Update	CVE-2026-46598 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent	02-06-2026	2164
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	02-06-2026	2165
MSRC Security Update	CVE-2026-21717 A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table. This vulnerability affects 20.x, 22.x, 24.x, and 25.x.	02-06-2026	2166
MSRC Security Update	CVE-2026-46597 Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh	02-06-2026	2167
MSRC Security Update	CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna	02-06-2026	2168
MSRC Security Update	CVE-2026-39828 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh	02-06-2026	2169
MSRC Security Update	CVE-2026-46595 Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh	02-06-2026	2170
MSRC Security Update	CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh	02-06-2026	2171
MSRC Security Update	CVE-2026-39824 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows	02-06-2026	2172
MSRC Security Update	CVE-2025-14575 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading	02-06-2026	2173
MSRC Security Update	CVE-2026-8723 qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly	02-06-2026	2174
MSRC Security Update	CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	02-06-2026	2175