Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2601-2625 di 3856 risultati

Pagina 105 di 155

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2024-6174 When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.	18-02-2026	2601
MSRC Security Update	CVE-2023-28938 Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.	18-02-2026	2602
MSRC Security Update	CVE-2021-22918 Node.js before 16.4.1 14.17.2 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().	18-02-2026	2603
MSRC Security Update	CVE-2024-46981 Redis' Lua library commands may lead to remote code execution	18-02-2026	2604
MSRC Security Update	CVE-2024-54458 scsi: ufs: bsg: Set bsg_queue to NULL after removal	18-02-2026	2605
MSRC Security Update	CVE-2023-24531 Output of "go env" does not sanitize values in cmd/go	18-02-2026	2606
MSRC Security Update	CVE-2023-28320 A denial of service vulnerability exists in curl	18-02-2026	2607
MSRC Security Update	CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing	18-02-2026	2608
MSRC Security Update	CVE-2023-28736 Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.	18-02-2026	2609
MSRC Security Update	CVE-2025-27423 Improper Input Validation in Vim	18-02-2026	2610
MSRC Security Update	CVE-2025-22104 ibmvnic: Use kernel helpers for hex dumps	18-02-2026	2611
MSRC Security Update	CVE-2023-52979 squashfs: harden sanity check in squashfs_read_xattr_id_table	18-02-2026	2612
MSRC Security Update	CVE-2022-23806 Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.	18-02-2026	2613
MSRC Security Update	CVE-2024-27304 pgx SQL Injection via Protocol Message Size Overflow	18-02-2026	2614
MSRC Security Update	CVE-2025-21729 wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion	18-02-2026	2615
MSRC Security Update	CVE-2024-57975 btrfs: do proper folio cleanup when run_delalloc_nocow() failed	18-02-2026	2616
MSRC Security Update	CVE-2025-32989 Gnutls: vulnerability in gnutls sct extension parsing	18-02-2026	2617
MSRC Security Update	CVE-2020-25657 A flaw was found in all released versions of m2crypto where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.	18-02-2026	2618
MSRC Security Update	CVE-2024-26982 Squashfs: check the inode number is not the invalid value of zero	18-02-2026	2619
MSRC Security Update	CVE-2024-57852 firmware: qcom: scm: smc: Handle missing SCM device	18-02-2026	2620
MSRC Security Update	CVE-2024-28110 Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials	18-02-2026	2621
MSRC Security Update	CVE-2022-43552 A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.	18-02-2026	2622
MSRC Security Update	CVE-2016-9179 It was found that Lynx doesn't parse the authority component of the URL correctly	18-02-2026	2623
MSRC Security Update	CVE-2025-4563 Nodes can bypass dynamic resource allocation authorization checks	18-02-2026	2624
MSRC Security Update	CVE-2025-32988 Gnutls: vulnerability in gnutls othername san export	18-02-2026	2625