agentprime: CWE-1025

Keycloak vulnerable to authorization bypass via incorrect uri comparison

Thu, 29 Oct 2026 16:37:26 GMT

org.keycloak:keycloak-policy-enforcer <26.0.10, fixed in 26.0.10. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-114649: Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

Thu, 22 Oct 2026 19:13:54 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104048: Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

Tue, 06 Oct 2026 19:34:25 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100248: The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin.

Fri, 25 Sep 2026 16:11:54 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14441: Logic flaw in SANnav Java cache key handling object comparison handling

Thu, 24 Sep 2026 20:58:52 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79677: Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout

Wed, 23 Sep 2026 11:28:03 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93854: OpenStack Blazar: In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level…

Fri, 18 Sep 2026 18:57:56 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-29811: CyberPanel: CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e…

Sun, 13 Sep 2026 00:00:00 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78619: Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically

Tue, 25 Aug 2026 21:21:08 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75840: ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex

Tue, 18 Aug 2026 11:19:49 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-71377: stoatchat before 20250210-1 Unrestricted Message History Fetch

Thu, 16 Jul 2026 12:19:14 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: Keycloak vulnerable to authorization bypass via incorrect uri comparison

Thu, 25 Jun 2026 18:30:41 GMT

org.keycloak:keycloak-policy-enforcer *, no fixed version yet. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-48860: Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

Wed, 10 Jun 2026 14:35:49 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks

Sat, 18 Apr 2026 00:41:54 GMT

zebra-consensus <5.0.2, fixed in 5.0.2. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40227: systemd: In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API…

Fri, 10 Apr 2026 15:19:51 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21691: iccDEV has Type Confusion in CIccTag:IsTypeCompressed()

Wed, 07 Jan 2026 21:53:02 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32464: HAProxy: HAProxy 2.2 through 3.1.6, in certain uncommon configurations…

Wed, 09 Apr 2025 00:00:00 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

tough timestamp metadata is cached when it fails snapshot rollback check

Fri, 28 Mar 2025 14:49:47 GMT

tough <0.20.0, fixed in 0.20.0. CVSS 5.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

tough failure to detect delegated target rollback

Fri, 28 Mar 2025 14:48:54 GMT

tough <0.20.0, fixed in 0.20.0. CVSS 5.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-25306: Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Notes

Mon, 10 Mar 2025 18:13:45 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27839: Tangem SDK: operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has…

Fri, 07 Mar 2025 00:00:00 GMT

CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-20342: Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability

Wed, 23 Oct 2024 17:09:27 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)

Thu, 14 Sep 2023 17:10:37 GMT

pocketmine/pocketmine-mp <4.23.1 || >=5.0.0, <5.3.1, fixed in 4.23.1, 5.3.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.