Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-4979 | UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server… |
stiofansisland |
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP |
2026-04-11T01:25:00.447Z | 2026-04-13T15:15:07.967Z | |
| cve-2026-5144 | BuddyPress Groupblog <= 1.9.3 - Authenticated (Subscri… |
boonebgorges |
BuddyPress Groupblog |
2026-04-11T01:24:59.754Z | 2026-04-13T15:15:08.152Z | |
| cve-2026-3498 | BlockArt Blocks <= 2.2.15 - Authenticated (Author+) St… |
wpblockart |
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library |
2026-04-11T01:24:59.386Z | 2026-04-13T12:27:05.181Z | |
| cve-2026-4895 | Greenshift <= 12.8.9 - Authenticated (Contributor+) St… |
wpsoul |
Greenshift – animation and page builder blocks |
2026-04-11T01:24:58.983Z | 2026-04-13T15:15:08.348Z | |
| cve-2026-5217 | Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site … |
optimole |
Optimole – Optimize Images in Real Time |
2026-04-11T01:24:58.602Z | 2026-04-13T15:15:08.543Z | |
| cve-2026-5207 | LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injec… |
chrisbadgett |
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes |
2026-04-11T01:24:58.163Z | 2026-04-13T15:15:08.729Z | |
| cve-2026-5226 | Optimole <= 4.2.3 - Reflected Cross-Site Scripting via… |
optimole |
Optimole – Optimize Images in Real Time |
2026-04-11T01:24:57.542Z | 2026-04-13T12:27:49.136Z | |
| cve-2026-3358 | Tutor LMS <= 3.9.7 - Missing Authorization to Authenti… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-11T01:24:56.945Z | 2026-04-13T15:15:08.860Z | |
| cve-2026-40354 | 2.9 (v3.1) | Flatpak xdg-desktop-portal before 1.20.4 and 1.21… |
Flatpak |
xdg-desktop-portal |
2026-04-11T00:29:03.467Z | 2026-04-15T15:14:27.291Z |
| cve-2026-3691 | 5.3 (v3.0) | OpenClaw Client PKCE Verifier Information Disclosure V… |
OpenClaw |
OpenClaw |
2026-04-11T00:17:40.509Z | 2026-04-13T17:42:24.369Z |
| cve-2026-3690 | 7.4 (v3.0) | OpenClaw Canvas Authentication Bypass Vulnerability |
OpenClaw |
OpenClaw |
2026-04-11T00:17:32.474Z | 2026-04-14T13:28:03.464Z |
| cve-2026-3689 | 6.5 (v3.0) | OpenClaw Canvas Path Traversal Information Disclosure … |
OpenClaw |
OpenClaw |
2026-04-11T00:17:24.472Z | 2026-04-13T17:40:53.608Z |
| cve-2026-4158 | 7.3 (v3.0) | KeePassXC OpenSSL Configuration Uncontrolled Search Pa… |
KeePassXC |
KeePassXC |
2026-04-11T00:17:00.676Z | 2026-04-13T17:40:04.189Z |
| cve-2026-4157 | 7.5 (v3.0) | ChargePoint Home Flex revssh Service Command Injection… |
ChargePoint |
Home Flex |
2026-04-11T00:16:38.871Z | 2026-04-13T17:39:00.899Z |
| cve-2026-4156 | 7.5 (v3.0) | ChargePoint Home Flex OCPP getpreq Stack-based Buffer … |
ChargePoint |
Home Flex |
2026-04-11T00:16:32.094Z | 2026-04-13T17:38:27.403Z |
| cve-2026-4155 | 7.5 (v3.0) | ChargePoint Home Flex Inclusion of Sensitive Informati… |
ChargePoint |
Home Flex |
2026-04-11T00:16:25.621Z | 2026-04-13T17:23:38.780Z |
| cve-2026-4154 | 7.8 (v3.0) | GIMP XPM File Parsing Integer Overflow Remote Code Exe… |
GIMP |
GIMP |
2026-04-11T00:16:10.657Z | 2026-04-14T03:55:54.921Z |
| cve-2026-4153 | 7.8 (v3.0) | GIMP PSP File Parsing Heap-based Buffer Overflow Remot… |
GIMP |
GIMP |
2026-04-11T00:16:01.848Z | 2026-04-14T03:55:53.814Z |
| cve-2026-4152 | 7.8 (v3.0) | GIMP JP2 File Parsing Heap-based Buffer Overflow Remot… |
GIMP |
GIMP |
2026-04-11T00:15:54.200Z | 2026-04-14T03:55:52.703Z |
| cve-2026-4151 | 7.8 (v3.0) | GIMP ANI File Parsing Integer Overflow Remote Code Exe… |
GIMP |
GIMP |
2026-04-11T00:15:45.368Z | 2026-04-14T03:55:50.232Z |
| cve-2026-4150 | 7.8 (v3.0) | GIMP PSD File Parsing Integer Overflow Remote Code Exe… |
GIMP |
GIMP |
2026-04-11T00:15:36.377Z | 2026-04-14T03:55:49.145Z |
| cve-2026-5059 | 9.8 (v3.0) | aws-mcp-server AWS CLI Command Injection Remote Code E… |
aws-mcp-server |
aws-mcp-server |
2026-04-11T00:15:02.920Z | 2026-04-13T17:30:38.053Z |
| cve-2026-5058 | 9.8 (v3.0) | aws-mcp-server Command Injection Remote Code Execution… |
aws-mcp-server |
aws-mcp-server |
2026-04-11T00:14:52.192Z | 2026-04-13T17:32:02.375Z |
| cve-2026-5055 | 7.8 (v3.0) | NoMachine Uncontrolled Search Path Element Local Privi… |
NoMachine |
NoMachine |
2026-04-11T00:14:25.877Z | 2026-04-14T03:55:48.016Z |
| cve-2026-5054 | 7.8 (v3.0) | NoMachine External Control of File Path Local Privileg… |
NoMachine |
NoMachine |
2026-04-11T00:14:16.658Z | 2026-04-14T03:55:46.803Z |
| cve-2026-5053 | 7.1 (v3.0) | NoMachine External Control of File Path Arbitrary File… |
NoMachine |
NoMachine |
2026-04-11T00:14:07.656Z | 2026-04-13T16:18:43.447Z |
| cve-2026-5495 | 7.8 (v3.0) | Labcenter Electronics Proteus PDSPRJ File Parsing Out-… |
Labcenter Electronics |
Proteus |
2026-04-11T00:13:26.901Z | 2026-04-13T16:17:32.512Z |
| cve-2026-5494 | 7.8 (v3.0) | Labcenter Electronics Proteus PDSPRJ File Parsing Out-… |
Labcenter Electronics |
Proteus |
2026-04-11T00:13:22.854Z | 2026-04-13T16:16:49.016Z |
| cve-2026-5493 | 7.8 (v3.0) | Labcenter Electronics Proteus PDSPRJ File Parsing Out-… |
Labcenter Electronics |
Proteus |
2026-04-11T00:13:18.336Z | 2026-04-13T18:24:57.963Z |
| cve-2026-5496 | 7.8 (v3.0) | Labcenter Electronics Proteus PDSPRJ File Parsing Type… |
Labcenter Electronics |
Proteus |
2026-04-11T00:13:14.901Z | 2026-04-13T18:25:22.216Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0586 | Multiples vulnérabilités dans Foxit Reader et Editor | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0585 | Multiples vulnérabilités dans HiSecOS EAGLE | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0584 | Vulnérabilité dans Ivanti Endpoint Manager Mobile | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0583 | Vulnérabilité dans les produits Xen | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0582 | Vulnérabilité dans les produits Citrix | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0581 | Multiples vulnérabilités dans les produits Apple | 2023-07-25T00:00:00.000000 | 2023-07-25T00:00:00.000000 |
| certfr-2023-avi-0580 | Multiples vulnérabilités dans les produits Axis | 2023-07-24T00:00:00.000000 | 2023-07-24T00:00:00.000000 |
| certfr-2023-avi-0579 | Multiples vulnérabilités dans Microsoft Edge | 2023-07-24T00:00:00.000000 | 2023-07-24T00:00:00.000000 |
| certfr-2023-avi-0578 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0577 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0576 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0575 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0574 | Multiples vulnérabilités dans les produits IBM | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0573 | Multiples vulnérabilités dans Mozilla Thunderbird | 2023-07-21T00:00:00.000000 | 2023-07-21T00:00:00.000000 |
| certfr-2023-avi-0572 | Vulnérabilité dans OpenSSH | 2023-07-20T00:00:00.000000 | 2023-07-20T00:00:00.000000 |
| certfr-2023-avi-0571 | Vulnérabilité dans OpenSSL | 2023-07-20T00:00:00.000000 | 2023-07-20T00:00:00.000000 |
| certfr-2023-avi-0570 | Multiples vulnérabilités dans Foxit PDF Reader et Foxit PDF Editor | 2023-07-20T00:00:00.000000 | 2023-07-20T00:00:00.000000 |
| certfr-2023-avi-0569 | Multiples vulnérabilités dans Adobe ColdFusion | 2023-07-20T00:00:00.000000 | 2023-07-20T00:00:00.000000 |
| certfr-2023-avi-0568 | Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0567 | Multiples vulnérabilités dans Oracle WebLogic | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0566 | Multiples vulnérabilités dans Oracle Virtualization | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0565 | Vulnérabilité dans Oracle Systems | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0564 | Multiples vulnérabilités dans Oracle PeopleSoft | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0563 | Multiples vulnérabilités dans Oracle MySQL | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0562 | Multiples vulnérabilités dans Oracle Java SE | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0561 | Multiples vulnérabilités dans Oracle Database Server | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0560 | Multiples vulnérabilités dans Google Chrome | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0559 | Multiples vulnérabilités dans les commutateurs Aruba | 2023-07-19T00:00:00.000000 | 2023-07-19T00:00:00.000000 |
| certfr-2023-avi-0558 | Vulnérabilité dans Elastic Cloud Entreprise | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |
| certfr-2023-avi-0557 | Multiples vulnérabilités dans Spring Security | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |