Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-14558 | N/A | WP User Frontend < 4.3.10 - Editor+ PHP Object Injecti… |
Unknown |
User Frontend |
2026-08-28T06:00:15.842Z | 2026-08-28T13:03:21.317Z |
| cve-2026-14567 | N/A | WP User Frontend < 4.3.10 - Unauthenticated User Email… |
Unknown |
User Frontend |
2026-08-28T06:00:16.015Z | 2026-08-28T13:03:21.166Z |
| cve-2026-19084 | N/A | Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read |
Unknown |
shared-files-pro |
2026-08-28T06:00:16.188Z | 2026-08-28T13:03:21.003Z |
| cve-2026-19423 | N/A | Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privi… |
Unknown |
Ultimate Member |
2026-08-28T06:00:16.618Z | 2026-08-28T13:03:20.842Z |
| cve-2026-77701 | N/A | WCFM Marketplace < 3.8.2 - Unauthenticated Refund Requ… |
Unknown |
WCFM Marketplace |
2026-08-28T06:00:16.799Z | 2026-08-28T13:03:20.688Z |
| cve-2026-79615 | N/A | Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Q… |
Unknown |
Quiz and Survey Master (QSM) |
2026-08-28T06:00:17.000Z | 2026-08-28T13:03:20.541Z |
| cve-2026-79706 | N/A | Breeze Cache < 2.5.13 - Unauthenticated File Creation … |
Unknown |
Breeze Cache |
2026-08-28T06:00:17.170Z | 2026-08-28T13:03:20.389Z |
| cve-2026-79995 | N/A | User Registration & Membership < 5.2.5 - Subscriber+ P… |
Unknown |
User Registration & Membership |
2026-08-28T06:00:17.343Z | 2026-08-28T13:03:20.229Z |
| cve-2026-79996 | N/A | User Registration & Membership < 5.2.6 - Authenticated… |
Unknown |
User Registration & Membership |
2026-08-28T06:00:17.519Z | 2026-08-28T13:03:20.076Z |
| cve-2026-80697 | N/A | erofs: ensure valid f_path for page cache sharing |
Linux |
Linux |
2026-08-28T06:53:02.236Z | 2026-08-28T12:08:17.218Z |
| cve-2026-44020 | Docling: Unsafe XML Entity Expansion in USPTO Patent Backend |
docling-project |
docling |
2026-06-24T17:45:46.644Z | 2026-08-28T12:04:31.876Z | |
| cve-2026-44513 | Diffusers: `trust_remote_code` bypass via `custom_pipe… |
huggingface |
diffusers |
2026-05-14T16:26:03.907Z | 2026-08-28T12:04:31.466Z | |
| cve-2026-42557 | jupyterlab: Command linker attributes in HTML enable o… |
jupyterlab |
jupyterlab |
2026-05-13T15:06:14.222Z | 2026-08-28T12:04:30.875Z | |
| cve-2026-44017 | Docling: Unsafe Zip Extraction in EasyOCR Model Download |
docling-project |
docling |
2026-06-24T17:48:46.833Z | 2026-08-28T12:04:30.580Z | |
| cve-2026-44488 | Axios: Allocation of Resources Without Limits or Throt… |
axios |
axios |
2026-06-11T15:37:38.013Z | 2026-08-28T12:04:28.387Z | |
| cve-2026-35397 | jupyter-server path traversal allows access to sibling… |
jupyter-server |
jupyter_server |
2026-05-05T19:37:33.810Z | 2026-08-28T12:04:28.358Z | |
| cve-2026-0545 | Missing Authentication for Critical Function in mlflow… |
mlflow |
mlflow/mlflow |
2026-04-03T17:03:12.833Z | 2026-08-28T12:04:27.665Z | |
| cve-2026-2614 | Arbitrary File Read via Prompt Tag Source Validation B… |
mlflow |
mlflow/mlflow |
2026-05-11T19:02:46.025Z | 2026-08-28T12:04:27.071Z | |
| cve-2026-44289 | protobufjs: Denial of service through unbounded protob… |
protobufjs |
protobuf.js |
2026-05-13T14:39:09.791Z | 2026-08-28T12:04:26.986Z | |
| cve-2026-44494 | Axios: Full Man-in-the-Middle via Prototype Pollution … |
axios |
axios |
2026-06-11T15:32:03.155Z | 2026-08-28T12:04:26.956Z | |
| cve-2026-44727 | Jupyter Server: Stored XSS in `NbconvertFileHandler` /… |
jupyter-server |
jupyter_server |
2026-06-22T19:56:56.776Z | 2026-08-28T12:04:25.625Z | |
| cve-2026-44495 | Axios: Credential Theft and Response Hijacking via Pro… |
axios |
axios |
2026-06-11T15:33:12.433Z | 2026-08-28T12:04:24.514Z | |
| cve-2026-54293 | NLTK: URL-Encoded Path Traversal in nltk.data.load() A… |
nltk |
nltk |
2026-06-22T17:25:05.611Z | 2026-08-28T12:04:24.058Z | |
| cve-2026-41672 | xmldom: XML node injection through unvalidated comment… |
xmldom |
xmldom |
2026-05-07T03:36:16.914Z | 2026-08-28T12:04:23.913Z | |
| cve-2026-44492 | Axios: shouldBypassProxy does not recognize IPv4-mappe… |
axios |
axios |
2026-06-11T15:29:13.890Z | 2026-08-28T12:04:23.834Z | |
| cve-2026-45736 | ws: Uninitialized memory disclosure |
websockets |
ws |
2026-05-15T14:53:57.263Z | 2026-08-28T12:04:23.744Z | |
| cve-2026-44724 | systeminformation: Linux command injection in networkI… |
sebhildebrandt |
systeminformation |
2026-05-27T19:26:28.392Z | 2026-08-28T12:04:23.314Z | |
| cve-2026-48710 | Starlette has missing Host header validation that pois… |
Kludex |
starlette |
2026-05-26T21:54:54.393Z | 2026-08-28T12:04:23.177Z | |
| cve-2026-49851 | Mistune: Potential DoS via quadratic-time parsing in p… |
lepture |
mistune |
2026-06-24T17:05:33.602Z | 2026-08-28T12:04:23.106Z | |
| cve-2026-42266 | JupyterLab has an Extension Manager API/GUI Policy Dis… |
jupyterlab |
jupyterlab |
2026-05-13T15:08:49.846Z | 2026-08-28T12:04:22.624Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0558 | Vulnérabilité dans Elastic Cloud Entreprise | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |
| certfr-2023-avi-0557 | Multiples vulnérabilités dans Spring Security | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |
| certfr-2023-avi-0556 | Multiples vulnérabilités dans Splunk SOAR | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |
| certfr-2023-avi-0555 | Multiples vulnérabilités dans NetApp SnapCenter | 2023-07-18T00:00:00.000000 | 2023-07-18T00:00:00.000000 |
| certfr-2023-avi-0554 | Vulnérabilité dans les produits Belden | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0553 | Vulnérabilité dans les commutateurs Moxa | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0552 | Multiples vulnérabilités dans Microsoft Edge | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0551 | Vulnérabilité dans Spring HATEOAS | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0550 | Vulnérabilité dans OpenSSL | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0549 | Vulnérabilité dans Adobe ColdFusion | 2023-07-17T00:00:00.000000 | 2023-07-17T00:00:00.000000 |
| certfr-2023-avi-0548 | Vulnérabilité dans Cisco SD-WAN vManage | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0547 | Vulnérabilité dans Microsoft Active Directory Federation Service | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0546 | Vulnérabilité dans Zimbra Collaboration Suite | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0545 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0544 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0543 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0542 | Vulnérabilité dans Ghostscript | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0541 | Multiples vulnérabilités dans les produits IBM | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0540 | Vulnérabilité dans Palo Alto Networks PAN-OS | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0539 | Vulnérabilité dans Wireshark | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0538 | Vulnérabilité dans les produits Apple | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0537 | Multiples vulnérabilités dans les produits Juniper | 2023-07-13T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0536 | Multiples vulnérabilités dans les produits Microsoft | 2023-07-12T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0535 | Vulnérabilité dans Microsoft Azure | 2023-07-12T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0534 | Multiples vulnérabilités dans Microsoft .Net | 2023-07-12T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0533 | Multiples vulnérabilités dans Microsoft Windows | 2023-07-12T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0532 | Multiples vulnérabilités dans Microsoft Office | 2023-07-12T00:00:00.000000 | 2023-07-13T00:00:00.000000 |
| certfr-2023-avi-0531 | Multiples vulnérabilités dans les produits SAP | 2023-07-12T00:00:00.000000 | 2023-07-12T00:00:00.000000 |
| certfr-2023-avi-0530 | Multiples vulnérabilités dans les produits Fortinet | 2023-07-12T00:00:00.000000 | 2023-07-12T00:00:00.000000 |
| certfr-2023-avi-0529 | Multiples vulnérabilités dans Citrix Secure Access client | 2023-07-12T00:00:00.000000 | 2023-07-12T00:00:00.000000 |