Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3451-3475 di 5670 risultati

Pagina 139 di 227

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-50031 ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.	09-06-2026	3451
MSRC Security Update	CVE-2026-48959 IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward	09-06-2026	3452
MSRC Security Update	CVE-2026-42250 Off-by-One Leading to Out-of-Bounds Write in bzip2	09-06-2026	3453
MSRC Security Update	CVE-2025-15649 IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date	09-06-2026	3454
MSRC Security Update	CVE-2026-48962 IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob	09-06-2026	3455
MSRC Security Update	CVE-2026-42790 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification	09-06-2026	3456
MSRC Security Update	CVE-2026-42789 Non-CA certificate accepted as intermediate issuer in public_key path validation	09-06-2026	3457
MSRC Security Update	CVE-2026-40510 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c	09-06-2026	3458
MSRC Security Update	CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c	09-06-2026	3459
MSRC Security Update	CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory	09-06-2026	3460
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	09-06-2026	3461
MSRC Security Update	CVE-2026-39833 Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent	09-06-2026	3462
MSRC Security Update	CVE-2026-46598 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent	09-06-2026	3463
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	09-06-2026	3464
MSRC Security Update	CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh	09-06-2026	3465
MSRC Security Update	CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html	09-06-2026	3466
MSRC Security Update	CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go	09-06-2026	3467
MSRC Security Update	CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail	09-06-2026	3468
MSRC Security Update	CVE-2026-39836 Panic in Dial and LookupPort when handling NUL byte on Windows in net	09-06-2026	3469
MSRC Security Update	CVE-2026-39820 Quadratic string concatentation in consumeComment in net/mail	09-06-2026	3470
MSRC Security Update	CVE-2026-33811 Crash when handling long CNAME response in net	09-06-2026	3471
MSRC Security Update	CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution	09-06-2026	3472
MSRC Security Update	CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution	09-06-2026	3473
MSRC Security Update	CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution	09-06-2026	3474
MSRC Security Update	CVE-2026-27144 Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile	09-06-2026	3475