CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 21:23 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103836 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103835 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103837 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103833 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103834 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103841 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103839 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103850 | AS Adobe Substance 3D Stager Adobe | 5.5 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103838 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103851 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103840 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103830 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103843 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Use After Free (CWE-416) |
| CVE-2026-63147 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name |
| CVE-2026-63172 | AP Agora Project Omnispace | 7.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit |
| CVE-2026-63161 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 Session Fixation via Authentication |
| CVE-2026-63174 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList |
| CVE-2026-63153 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() |
| CVE-2026-63165 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter |
| CVE-2026-63152 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter |
| CVE-2026-63163 | AP Agora Project Omnispace | 7.5 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload |
| CVE-2026-63162 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter |
| CVE-2026-103846 | AD Adobe Dimension Adobe | 8.6 | Oct 13 | Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79) |
| CVE-2026-103845 | AD Adobe Dimension Adobe | 8.6 | Oct 13 | Dimension | Uncontrolled Search Path Element (CWE-427) |
| CVE-2026-103855 | AD Adobe Dimension Adobe | 5.5 | Oct 13 | Dimension | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103844 | AD Adobe Dimension Adobe | 7.8 | Oct 13 | Dimension | Out-of-bounds Write (CWE-787) |
| CVE-2026-103854 | AD Adobe Dimension Adobe | 7.8 | Oct 13 | Dimension | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103853 | AD Adobe Dimension Adobe | 5.5 | Oct 13 | Dimension | Out-of-bounds Read (CWE-125) |
| CVE-2026-103847 | AD Adobe Dimension Adobe | 8.6 | Oct 13 | Dimension | Untrusted Search Path (CWE-426) |
| CVE-2026-63154 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] |
| CVE-2026-63160 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage |
| CVE-2026-63159 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover |
| CVE-2026-63158 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies |
| CVE-2026-63149 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() |
| CVE-2026-90532 | AE Adobe Experience Manager 6.5 Adobe | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2026-90531 | AE Adobe Experience Manager 6.5 Adobe | 9.6 | Oct 13 | Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) |
| CVE-2026-83960 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-83958 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-83662 | AE Adobe Experience Manager 6.5 Adobe | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-75732 | AE Adobe Experience Manager 6.5 Adobe | 9.9 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2026-48398 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-48383 | AE Adobe Experience Manager 6.5 Adobe | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2026-48382 | AE Adobe Experience Manager 6.5 Adobe | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2026-110084 | AE Adobe Experience Manager 6.5 Adobe | 7.1 | Oct 13 | Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91) |
| CVE-2026-110083 | AE Adobe Experience Manager 6.5 Adobe | 7.1 | Oct 13 | Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-110082 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-110081 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-110080 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110079 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110078 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |