Browse CVEs

CRITICAL 9.8 CVE-2025-67079 File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library vi… Agora Project 25.10+ Fix from $2,3002026-01-15 HIGH 8.8 CVE-2025-67077 File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the Uploa… Agora Project 25.10+ Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-67076 Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc… Agora Project 25.10+ Fix from $1,9502026-01-15 MEDIUM 6.1 CVE-2025-67078 Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify paramete… Agora Project 25.10+ Fix from $1,6002026-01-15 MEDIUM 6.1 CVE-2017-6559 XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. Agora Project No fix yet Fix from $1,6002017-03-09 MEDIUM 6.1 CVE-2017-6560 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. Agora Project No fix yet Fix from $1,6002017-03-09 MEDIUM 6.1 CVE-2017-6561 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. Agora Project No fix yet Fix from $1,6002017-03-09 MEDIUM 6.1 CVE-2017-6562 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. Agora Project No fix yet Fix from $1,6002017-03-09