Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Omnispace — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting Omnispace. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data for the vendor Omnispace, focusing on common software weakness classifications and associated tags. It collects records of security issues reported by Omnispace or affecting its products, covering incidents discovered from 2015 to the present. Here, you can track a vendor's advisories to monitor their response timeline and remediation efforts. You can also understand a weakness class by seeing how frequently specific flaws appear in this vendor's ecosystem, helping to contextualize risk profiles. Additionally, you may look up a product's vulnerability history to identify long-term security trends or recurring defects in their codebase. This aggregation serves as a centralized reference for security researchers, supply chain analysts, and system administrators seeking to assess the attack surface of Omnispace solutions. By examining these records, users can evaluate the stability and security maturity of the vendor over time. The data includes various severity levels and impact scores, allowing for a nuanced understanding of the threat landscape. This resource does not provide real-time monitoring or automated patching capabilities but offers historical insights for manual risk assessment. Users are encouraged to cross-reference this information with official vendor channels for the most current status of any reported issues. The focus remains on providing a clear, factual overview of past and present vulnerabilities without speculative analysis or promotional content.

Found 21 results / 21 Clear Filters
Top products by Omnispace: Agora Project
CVE ID Title CVSS Severity Published
CVE-2026-63171 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description — Agora Project CWE-79 5.4 Medium 2026-10-13
CVE-2026-63169 Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe — Agora Project CWE-79 6.4 Medium 2026-10-13
CVE-2026-63168 Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass — Agora Project CWE-79 5.4 Medium 2026-10-13
CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module — Agora Project CWE-79 5.4 Medium 2026-10-13
CVE-2026-63156 Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter — Agora Project CWE-79 6.1 Medium 2026-10-13
CVE-2026-63148 Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename — Agora Project CWE-79 5.4 Medium 2026-10-13
CVE-2026-63147 Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name — Agora Project CWE-79 5.4 Medium 2026-10-13
CVE-2026-63172 Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit — Agora Project CWE-862 7.1 High 2026-10-13
CVE-2026-63161 Omnispace Agora Project < 26.10.0 Session Fixation via Authentication — Agora Project CWE-384 8.8 High 2026-10-13
CVE-2026-63174 Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList — Agora Project CWE-862 8.1 High 2026-10-13
CVE-2026-63153 Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() — Agora Project CWE-639 8.1 High 2026-10-13
CVE-2026-63165 Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter — Agora Project CWE-89 8.1 High 2026-10-13
CVE-2026-63152 Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter — Agora Project CWE-89 8.1 High 2026-10-13
CVE-2026-63163 Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload — Agora Project CWE-639 7.5 High 2026-10-13
CVE-2026-63162 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter — Agora Project CWE-22 8.8 High 2026-10-13
CVE-2026-63154 Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] — Agora Project CWE-89 8.8 High 2026-10-13
CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage — Agora Project CWE-522 7.4 High 2026-10-13
CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover — Agora Project CWE-640 7.4 High 2026-10-13
CVE-2026-63158 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies — Agora Project CWE-836 7.4 High 2026-10-13
CVE-2026-63149 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() — Agora Project CWE-330 7.4 High 2026-10-13
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php — Agora Project CWE-94 9.8 Critical 2026-10-13

This page lists every published CVE security advisory associated with Omnispace. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.