Omnispace vulnerabilities
Every vulnerability this feed holds for Omnispace, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
21 vulnerabilities tracked.
- 9.3 Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into…
- 9.1 Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side,…
- 9.1 Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to…
- 9.1 Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored…
- 9.1 Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default…
- 8.7 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows…
- 8.7 Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the…
- 8.7 Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate…
- 8.6 Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated…
- 8.6 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users…
- 8.6 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated…
- 8.6 Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject…
- 8.6 Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject…
- 7.1 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to…
- 5.3 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post…
- 5.1 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject…
- 5.1 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist…
- 5.1 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject…
- 5.1 Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…
- 5.1 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject…
- 5.1 Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Omnispace is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Linux Red Hat IBM Google Microsoft Apple Apache Software Foundation Oracle Corporation zephyrproject n/a Unknown JetBrains Drupal Cisco Tanium OpenEMR go-vikunja hickory-dns Eclipse Foundation Samsung Semiconductor SuiteCRM wazuh HCL Software Gnome