Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known sess…Check if you run itEPSS 0.38%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by co…Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authent…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.7Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-c…Check if you run itEPSS 0.43%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right r…Check if you run itEPSS 0.29%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCateg…Check if you run itEPSS 0.30%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploadi…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a f…Check if you run itEPSS 0.21%Oct 13, 2026
- High8.8VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationCheck if you run itEPSS 0.16%Oct 13, 2026
- High7.1Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Se…Check if you run itEPSS 0.34%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- High8.8The agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability.Open the advisoryOct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.7Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL).Check if you run itEPSS 0.39%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.36%Oct 13, 2026
- Critical9.3Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerab…Check if you run itEPSS 0.68%Oct 13, 2026
- Critical9.9Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, po…Check if you run itEPSS 0.63%Oct 13, 2026
- High7.2The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 0.3.6.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.5The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 1…Check if you run itEPSS 0.38%Oct 13, 2026
- Critical9.8Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.89%Oct 13, 2026