Known Vulnerabilities for Endpoint Protection Plus by Avast
Listed below are 1 of the newest known vulnerabilities associated with "Endpoint Protection Plus" by "Avast".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41170 json | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the `Restor... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-40566 json | FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery (S... | Not Provided | 2026-04-21 | 2026-04-21 |
| CVE-2026-40191 json | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46... | Not Provided | 2026-04-10 | 2026-04-15 |
| CVE-2026-39901 json | monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw a... | Not Provided | 2026-04-08 | 2026-04-10 |
| CVE-2026-34383 json | Admidio is an open-source user management solution. Prior to version 5.0.8, the inventory module's item_save endpoint accepts... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-34215 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6... | Not Provided | 2026-03-31 | 2026-04-03 |
| CVE-2026-31014 json | Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint proces... | Not Provided | 2026-04-21 | 2026-04-21 |
| CVE-2026-4352 json | The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint ... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-4302 json | The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, a... | Not Provided | 2026-03-21 | 2026-04-08 |
| CVE-2026-3190 json | A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to enfor... | Not Provided | 2026-03-26 | 2026-04-02 |