Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploadi…CVE-2026-63148 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 13, 2026
High7.1Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Se…CVE-2026-110083 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.CVE-2026-110082 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-110081 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110080 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110079 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110078 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110077 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110076 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110075 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-110074 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-110073 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-110037 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-109415 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
High7.7Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL).CVE-2026-14765 · Epic Games · Unreal Engine · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Critical9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and Oct…CVE-2026-110447 · Collabora · Collabora Online - Built-in CODE Server · CVE.org · FIRST EPSS · NIST NVDEPSS 1.2%Oct 13, 2026
High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.CVE-2026-110445 · TEAMPLUS TECHNOLOGY · TeamPlus Messenger · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 0.6%Oct 13, 2026
High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.CVE-2026-110444 · TEAMPLUS TECHNOLOGY · TeamPlus Messenger · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 0.6%Oct 13, 2026
Critical9.8The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function.CVE-2026-110002 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.0%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-107682 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-107305 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
High7.7Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary…CVE-2026-106634 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-106633 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.CVE-2026-106632 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 13, 2026
Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…CVE-2026-106631 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026