Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3751-3775 di 5670 risultati

Pagina 151 di 227

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh	02-06-2026	3751
MSRC Security Update	CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh	02-06-2026	3752
MSRC Security Update	CVE-2026-39832 Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent	02-06-2026	3753
MSRC Security Update	CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts	02-06-2026	3754
MSRC Security Update	CVE-2026-46598 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent	02-06-2026	3755
MSRC Security Update	CVE-2026-21717 A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table. This vulnerability affects 20.x, 22.x, 24.x, and 25.x.	02-06-2026	3756
MSRC Security Update	CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html	02-06-2026	3757
MSRC Security Update	CVE-2026-46597 Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh	02-06-2026	3758
MSRC Security Update	CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna	02-06-2026	3759
MSRC Security Update	CVE-2026-39828 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh	02-06-2026	3760
MSRC Security Update	CVE-2026-46595 Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh	02-06-2026	3761
MSRC Security Update	CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh	02-06-2026	3762
MSRC Security Update	CVE-2026-39824 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows	02-06-2026	3763
MSRC Security Update	CVE-2025-14575 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading	02-06-2026	3764
MSRC Security Update	CVE-2026-8723 qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly	02-06-2026	3765
MSRC Security Update	CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	02-06-2026	3766
MSRC Security Update	CVE-2025-23167 A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.	02-06-2026	3767
MSRC Security Update	CVE-2026-3592 Amplification vulnerabilities via self-pointed glue records	02-06-2026	3768
MSRC Security Update	CVE-2026-48959 IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward	02-06-2026	3769
MSRC Security Update	CVE-2026-6324 Libsoup: libsoup: http request smuggling via unsigned to signed conversion error	02-06-2026	3770
MSRC Security Update	CVE-2026-10028 Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain	02-06-2026	3771
MSRC Security Update	CVE-2025-6965 Integer Truncation on SQLite	01-06-2026	3772
MSRC Security Update	CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability	01-06-2026	3773
MSRC Security Update	CVE-2026-45494 Microsoft Edge (Chromium-based) Spoofing Vulnerability	01-06-2026	3774
MSRC Security Update	CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability	01-06-2026	3775