Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3601-3625 di 5670 risultati

Pagina 145 di 227

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-2297 SourcelessFileLoader does not use io.open_code()	03-06-2026	3601
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	03-06-2026	3602
MSRC Security Update	CVE-2026-6383 Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation	03-06-2026	3603
MSRC Security Update	CVE-2025-58160 Tracing logging user input may result in poisoning logs with ANSI escape sequences	03-06-2026	3604
MSRC Security Update	CVE-2026-3832 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	03-06-2026	3605
MSRC Security Update	CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh	03-06-2026	3606
MSRC Security Update	CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509	03-06-2026	3607
MSRC Security Update	CVE-2026-37457 An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.	03-06-2026	3608
MSRC Security Update	CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509	03-06-2026	3609
MSRC Security Update	CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service	03-06-2026	3610
MSRC Security Update	CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions	03-06-2026	3611
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	03-06-2026	3612
MSRC Security Update	CVE-2025-60876 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).	03-06-2026	3613
MSRC Security Update	CVE-2025-9403 jqlang jq JSON jq_test.c run_jq_tests assertion	03-06-2026	3614
MSRC Security Update	CVE-2025-11083 GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow	03-06-2026	3615
MSRC Security Update	CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file	03-06-2026	3616
MSRC Security Update	CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail	03-06-2026	3617
MSRC Security Update	CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509	03-06-2026	3618
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	03-06-2026	3619
MSRC Security Update	CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto	03-06-2026	3620
MSRC Security Update	CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http	03-06-2026	3621
MSRC Security Update	CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar	03-06-2026	3622
MSRC Security Update	CVE-2026-4948 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	03-06-2026	3623
MSRC Security Update	CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs	03-06-2026	3624
MSRC Security Update	CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.	03-06-2026	3625