CVE Vulnerability Database

Search and browse 424,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-63161HIGH8.8Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack ...
CVE-2026-63160HIGH7.4Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbati...
CVE-2026-63159HIGH7.4Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthentic...
CVE-2026-63158HIGH7.4Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing ...
CVE-2026-63154HIGH8.8Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrat...
CVE-2026-63153HIGH8.1Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows a...
CVE-2026-63152HIGH8.1Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated att...
CVE-2026-63149HIGH7.4Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict te...
CVE-2026-63148MEDIUM5.4Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated at...
CVE-2026-63147MEDIUM5.4Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated us...
CVE-2026-63146CRITICAL9.8Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled valu...
CVE-2026-56826MEDIUM5.4Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings p...
CVE-2026-55601HIGH7.3MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX ...
CVE-2026-48398MEDIUM5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ...
CVE-2026-48383CRITICAL10Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe...
CVE-2026-48382CRITICAL10Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe...
CVE-2026-16753HIGH8.8Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows ...
CVE-2026-110084HIGH7.1Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in ...
CVE-2026-110083HIGH7.1Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje...
CVE-2026-110082MEDIUM5.4Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack...
CVE-2026-110081MEDIUM5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-...
CVE-2026-110080MEDIUM5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ...
CVE-2026-110079MEDIUM5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ...
CVE-2026-110078MEDIUM5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ...
CVE-2026-110077MEDIUM5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit ...