Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a f…Check if you run itEPSS 0.21%Oct 13, 2026
- High8.8VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationCheck if you run itEPSS 0.16%Oct 13, 2026
- High7.1Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Se…Check if you run itEPSS 0.34%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.7Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL).Check if you run itEPSS 0.39%Oct 13, 2026
- Critical9.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.23%Oct 13, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.Check if you run itEPSS 0.58%Oct 13, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.Check if you run itEPSS 0.58%Oct 13, 2026
- Critical9.8The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function.Check if you run itEPSS 0.98%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.7Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary…Check if you run itEPSS 0.46%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026