Browsing: Alerts

Serial number: AV26-403Date: April 29, 2026 On April 29, 2026, Jenkins published a security advisory to address vulnerabilities in the following products:…

HomeDescriptionOllama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP…

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the…

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the…

For the stable distribution (trixie), these problems have been fixed inversion 4.9.14-0+deb13u1.We recommend that you upgrade your pdns packages.For the…

HomeDescriptionSQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate…

HomeDescriptionMissing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms…

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the…

HomeDescriptionInsufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation…

For the stable distribution (trixie), these problems have been fixed inversion 5.2.9-0+deb13u1.We recommend that you upgrade your pdns-recursor packages.For the…