Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory…Check if you run itEPSS 0.71%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known sess…Check if you run itEPSS 0.38%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by co…Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authent…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.7Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-c…Check if you run itEPSS 0.43%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right r…Check if you run itEPSS 0.29%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCateg…Check if you run itEPSS 0.30%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploadi…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a f…Check if you run itEPSS 0.21%Oct 13, 2026
- High7.1Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Se…Check if you run itEPSS 0.34%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.7Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL).Check if you run itEPSS 0.39%Oct 13, 2026
- Critical9.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.23%Oct 13, 2026