agentprime: CWE-115

CVE-2026-122299: Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation

Wed, 04 Nov 2026 22:57:13 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101170: DoS vulnerability in the file parsing module.

Mon, 02 Nov 2026 06:18:40 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116241: pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

Fri, 30 Oct 2026 19:55:13 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73798: HPE NonStop DNS 9.2.3 Non Secure Version

Wed, 14 Oct 2026 11:26:59 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63650: Improper certificate validation in OpenVPN

Fri, 14 Aug 2026 22:13:26 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17566: pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)

Fri, 31 Jul 2026 16:00:22 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17351: pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)

Fri, 31 Jul 2026 16:00:19 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42004: EDNS options smuggling

Thu, 25 Jun 2026 12:24:20 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

Wed, 17 Jun 2026 18:35:47 GMT

vllm >=0.11.0, <=0.23.0, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

Wed, 17 Jun 2026 14:02:42 GMT

vllm >=0.11.0, <0.24.0, fixed in 0.24.0. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Tue, 16 Dec 2025 00:43:52 GMT

github.com/altcha-org/altcha-lib-go <1.0.0, fixed in 1.0.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Astro allows unauthorized third-party images in _image endpoint

Tue, 19 Aug 2025 15:40:31 GMT

astro <4.16.19 || >=5.0.0-alpha.0, <5.13.2, fixed in 4.16.19, 5.13.2. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

GitProxy Backfile Parsing Exploit

Wed, 30 Jul 2025 16:40:07 GMT

@finos/git-proxy <1.19.2, fixed in 1.19.2. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-5826: Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability

Wed, 25 Jun 2025 18:00:38 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-5747: WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability

Fri, 06 Jun 2025 15:30:59 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32908: Libsoup: denial of service on libsoup through http/2 server

Mon, 14 Apr 2025 14:00:30 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality

Thu, 20 Mar 2025 12:32:51 GMT

github.com/mudler/LocalAI <2.22.0, fixed in 2.22.0. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-11169: Unhandled Exception Leading to Server Crash in danny-avila/librechat

Thu, 20 Mar 2025 10:09:59 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Wed, 12 Mar 2025 22:06:40 GMT

golang.org/x/net <0.36.0, fixed in 0.36.0. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-25069: Apache Kvrocks: Cross-Protocol Scripting Vulnerability

Fri, 07 Feb 2025 12:46:11 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-32228: A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.

Thu, 11 Apr 2024 09:05:08 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-32260: A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.

Tue, 19 Mar 2024 15:54:23 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Misinterpretation of Input in thorsten/phpmyfaq

Fri, 17 Feb 2023 03:30:25 GMT

thorsten/phpmyfaq <3.1.11, fixed in 3.1.11. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-20915: Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability

Mon, 10 Oct 2022 20:43:15 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

Fri, 16 Sep 2022 00:00:39 GMT

parse-url <8.1.0, fixed in 8.1.0. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

URL Confusion When Scheme Not Supplied in medialize/uri.js

Tue, 05 Apr 2022 00:00:17 GMT

urijs <1.19.11, fixed in 1.19.11. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Authentication Bypass in github.com/russellhaering/gosaml2

Fri, 11 Feb 2022 23:58:09 GMT

github.com/russellhaering/gosaml2 <0.6.0, fixed in 0.6.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-21672: /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca

Mon, 10 Jan 2022 21:00:13 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-1587: Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability

Wed, 25 Aug 2021 19:11:06 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

XML Processing error in github.com/crewjam/saml

Wed, 23 Jun 2021 17:29:42 GMT

github.com/crewjam/saml <0.4.3, fixed in 0.4.3. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

REXML round-trip instability

Fri, 30 Apr 2021 17:30:37 GMT

rexml <3.2.5, fixed in 3.2.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Misinterpretation of malicious XML input

Fri, 12 Mar 2021 22:39:39 GMT

xmldom <0.5.0, fixed in 0.5.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-0207: NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

Fri, 15 Jan 2021 17:35:54 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-29511: Go: The encoding/xml package in Go (all versions) does not correctly preserve the semantics…

Mon, 14 Dec 2020 19:59:50 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-29510: Go: The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the…

Mon, 14 Dec 2020 19:57:44 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-12123: Node.js: Node.js: All versions prior to Node.js 6.15.0, 8.14.0…

Wed, 28 Nov 2018 17:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-12116: Node.js: Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If…

Wed, 28 Nov 2018 17:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-7159: Node.js: The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length`…

Thu, 17 May 2018 14:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.