5.3 CVE-2025-15565
The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing...

7.5 CVE-2026-27282
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability...

9.3 CVE-2026-27304
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability...

8.6 CVE-2026-27305
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname...

8.4 CVE-2026-27306
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability...

2.4 CVE-2026-27307
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption...

2.4 CVE-2026-27308
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption...

7 CVE-2026-33018
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior...

7.1 CVE-2026-33019
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior...

7.1 CVE-2026-33020
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior...

4.3 CVE-2026-33146
Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulnerability...

4.6 CVE-2026-33193
Docmost is open-source collaborative wiki and documentation software. Versions prior to 0.70.0 are vulnerable...

5.4 CVE-2026-34212
Docmost is open-source collaborative wiki and documentation software. In versions prior to 0.71.0, improper...

5.4 CVE-2026-34213
Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and...

6.5 CVE-2026-34370
Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the notebook...

7.1 CVE-2026-34602
Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the /api/course_rel_users...

7.7 CVE-2026-34619
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname...

7.8 CVE-2026-34631
InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could...

8.8 CVE-2026-35196
Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command...

CVE-2026-39906
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting...

CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF...