Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 1176-1200 di 3755 risultati

Pagina 48 di 151

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-60753 An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).	18-02-2026	1176
MSRC Security Update	CVE-2022-27536 Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.	18-02-2026	1177
MSRC Security Update	CVE-2024-50613 libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.	18-02-2026	1178
MSRC Security Update	CVE-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution	18-02-2026	1179
MSRC Security Update	CVE-2023-42366 A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.	18-02-2026	1180
MSRC Security Update	CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http	18-02-2026	1181
MSRC Security Update	CVE-2019-14197 An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.	18-02-2026	1182
MSRC Security Update	CVE-2025-38261 riscv: save the SR_SUM status over switches	18-02-2026	1183
MSRC Security Update	CVE-2025-21666 vsock: prevent null-ptr-deref in vsock_*[has_data\|has_space]	18-02-2026	1184
MSRC Security Update	CVE-2024-50614 TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.	18-02-2026	1185
MSRC Security Update	CVE-2024-3447 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()	18-02-2026	1186
MSRC Security Update	CVE-2023-24540 Improper handling of JavaScript whitespace in html/template	18-02-2026	1187
MSRC Security Update	CVE-2025-38257 s390/pkey: Prevent overflow in size calculation for memdup_user()	18-02-2026	1188
MSRC Security Update	CVE-2022-3510 Parsing issue in protobuf message-type extension	18-02-2026	1189
MSRC Security Update	CVE-2025-38251 atm: clip: prevent NULL deref in clip_push()	18-02-2026	1190
MSRC Security Update	CVE-2020-36475 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.	18-02-2026	1191
MSRC Security Update	CVE-2025-21683 bpf: Fix bpf_sk_select_reuseport() memory leak	18-02-2026	1192
MSRC Security Update	CVE-2024-0874 Coredns: cd bit response is cached and served later	18-02-2026	1193
MSRC Security Update	CVE-2024-50615 TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.	18-02-2026	1194
MSRC Security Update	CVE-2025-38263 bcache: fix NULL pointer in cache_set_flush()	18-02-2026	1195
MSRC Security Update	CVE-2020-36477 An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).	18-02-2026	1196
MSRC Security Update	CVE-2023-6816 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer	18-02-2026	1197
MSRC Security Update	CVE-2025-21665 filemap: avoid truncating 64-bit offset to 32 bits	18-02-2026	1198
MSRC Security Update	CVE-2023-28154 Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.	18-02-2026	1199
MSRC Security Update	CVE-2024-49761 REXML ReDoS vulnerability	18-02-2026	1200