NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-33020 libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a h... 2026-04-14 7.1 LOCAL HIGH NVD
CVE-2026-33019 libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow leading to an out-... 2026-04-14 7.1 LOCAL HIGH NVD
CVE-2026-33018 libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a Use-After-Free vulnerability via the... 2026-04-14 7.0 LOCAL HIGH NVD
CVE-2026-27308 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application deni... 2026-04-14 2.4 ADJACENT_NETWORK LOW NVD
CVE-2026-27307 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application deni... 2026-04-14 2.4 ADJACENT_NETWORK LOW NVD
CVE-2026-27306 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... 2026-04-14 8.4 ADJACENT_NETWORK HIGH NVD
CVE-2026-27305 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln... 2026-04-14 8.6 NETWORK HIGH NVD
CVE-2026-27304 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... 2026-04-14 9.3 ADJACENT_NETWORK CRITICAL NVD
CVE-2026-27282 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature byp... 2026-04-14 7.5 NETWORK HIGH NVD
CVE-2025-15565 The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in ... 2026-04-14 5.3 NETWORK MEDIUM NVD
CVE-2026-34161 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in... 2026-04-14 5.1 NETWORK MEDIUM NVD
CVE-2026-34160 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS (Package Exchange Notification Services) plugin en... 2026-04-14 8.6 NETWORK HIGH NVD
CVE-2026-33715 Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/install.ajax.php is accessible without au... 2026-04-14 7.2 NETWORK HIGH NVD
CVE-2026-33714 Chamilo is an open-source learning management system (LMS). Version 2.0.0-RC.2 contains a SQL Injection vulnerability in the statistics AJAX endpoint,... 2026-04-14 7.1 NETWORK HIGH NVD
CVE-2026-27287 InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read... 2026-04-14 7.8 LOCAL HIGH NVD