Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2026-2050 di 2375 risultati

Pagina 82 di 95

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-39905 net: phylink: add lock for serializing concurrent pl->phydev writes with resolver	07-12-2025	2026
MSRC Security Update	CVE-2024-42064 drm/amd/display: Skip pipe if the pipe idx not set properly	07-12-2025	2027
MSRC Security Update	CVE-2025-37745 PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()	07-12-2025	2028
MSRC Security Update	CVE-2025-39901 i40e: remove read access to debugfs files	07-12-2025	2029
MSRC Security Update	CVE-2025-10158 Rsync: Out of bounds array access via negative index	07-12-2025	2030
MSRC Security Update	CVE-2025-21885 RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers	07-12-2025	2031
MSRC Security Update	CVE-2025-39927 ceph: fix race condition validating r_parent before applying state	07-12-2025	2032
MSRC Security Update	CVE-2024-57872 scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()	07-12-2025	2033
MSRC Security Update	CVE-2025-37945 net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY	07-12-2025	2034
MSRC Security Update	CVE-2024-57804 scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs	07-12-2025	2035
MSRC Security Update	CVE-2025-55560 An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.	07-12-2025	2036
MSRC Security Update	CVE-2018-7159 The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value of `12`. The HTTP specification does not allow for spaces in the `Content-Length` value and the Node.js HTTP parser has been brought into line on this particular difference. The security risk of this flaw to Node.js users is considered to be VERY LOW as it is difficult, and may be impossible, to craft an attack that makes use of this flaw in a way that could not already be achieved by supplying an incorrect value for `Content-Length`. Vulnerabilities may exist in user-code that make incorrect assumptions about the potential accuracy of this value compared to the actual length of the data supplied. Node.js users crafting lower-level HTTP utilities are advised to re-check the length of any input supplied after parsing is complete.	07-12-2025	2037
MSRC Security Update	CVE-2025-21892 RDMA/mlx5: Fix the recovery flow of the UMR QP	07-12-2025	2038
MSRC Security Update	CVE-2025-46152 In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.	07-12-2025	2039
MSRC Security Update	CVE-2024-35794 dm-raid: really frozen sync_thread during suspend	07-12-2025	2040
MSRC Security Update	CVE-2025-12748 Libvirt: denial of service in xml parsing	07-12-2025	2041
MSRC Security Update	CVE-2025-10911 Libxslt: use-after-free with key data stored cross-rvt	07-12-2025	2042
MSRC Security Update	CVE-2024-56782 ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()	07-12-2025	2043
MSRC Security Update	CVE-2025-21985 drm/amd/display: Fix out-of-bound accesses	07-12-2025	2044
MSRC Security Update	CVE-2023-27043 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.	07-12-2025	2045
MSRC Security Update	CVE-2024-56775 drm/amd/display: Fix handling of plane refcount	07-12-2025	2046
MSRC Security Update	CVE-2025-40202 ipmi: Rework user message limit handling	07-12-2025	2047
MSRC Security Update	CVE-2025-21732 RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error	07-12-2025	2048
MSRC Security Update	CVE-2025-58354 Kata Containers coco-tdx malicious host can circumvent initdata verification	07-12-2025	2049
MSRC Security Update	CVE-2024-25740 A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBI_IOCATT, because kobj->name is not released.	07-12-2025	2050