agentprime: CWE-1220Every new CWE-1220 Advisory and CVE.https://agentprime.io/CVE-2026-104867: Immich calendar heatmap endpoint discloses cross-user activity through broken access controlhttps://agentprime.io/advisories/CVE-2026-104867/https://agentprime.io/advisories/CVE-2026-104867/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:03:59 GMTCVECVE-2026-77779: Improper access control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77779/https://agentprime.io/advisories/CVE-2026-77779/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 05:31:05 GMTCVECVE-2026-77778: Improper access control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77778/https://agentprime.io/advisories/CVE-2026-77778/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:42:23 GMTCVECVE-2026-77777: Improper access control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77777/https://agentprime.io/advisories/CVE-2026-77777/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:36:50 GMTCVECVE-2026-119627: Gitea limited-visibility profile disclosure with public-only tokenshttps://agentprime.io/advisories/CVE-2026-119627/https://agentprime.io/advisories/CVE-2026-119627/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:58 GMTCVECVE-2026-57202: Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writeshttps://agentprime.io/advisories/CVE-2026-57202/https://agentprime.io/advisories/CVE-2026-57202/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:58:46 GMTCVECVE-2026-96372: Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167https://agentprime.io/advisories/CVE-2026-96372/https://agentprime.io/advisories/CVE-2026-96372/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:21:39 GMTCVECVE-2026-92539: Cross-organization user modification and deletion via the SCIM API in Grafana Enterprisehttps://agentprime.io/advisories/CVE-2026-92539/https://agentprime.io/advisories/CVE-2026-92539/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 16:55:17 GMTCVECVE-2026-85316: Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matchinghttps://agentprime.io/advisories/CVE-2026-85316/https://agentprime.io/advisories/CVE-2026-85316/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:43:00 GMTCVECVE-2026-111885: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup APIhttps://agentprime.io/advisories/CVE-2026-111885/https://agentprime.io/advisories/CVE-2026-111885/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:11 GMTCVECVE-2026-103509: Credential Disclosure in P4 Search Configuration APIhttps://agentprime.io/advisories/CVE-2026-103509/https://agentprime.io/advisories/CVE-2026-103509/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 14:41:28 GMTCVECVE-2026-78433: Gitea private attachment disclosure through repository mismatchhttps://agentprime.io/advisories/CVE-2026-78433/https://agentprime.io/advisories/CVE-2026-78433/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:38:17 GMTCVECVE-2026-70216: Windows Mobile Device Management Tampering Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-70216/https://agentprime.io/advisories/CVE-2026-70216/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:00:13 GMTCVECVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-83499/https://agentprime.io/advisories/CVE-2026-83499/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:59:46 GMTCVECVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-81969/https://agentprime.io/advisories/CVE-2026-81969/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:59:45 GMTCVECVE-2026-70218: Windows StateRepository API Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-70218/https://agentprime.io/advisories/CVE-2026-70218/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:59:42 GMTCVECVE-2026-93294: Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIshttps://agentprime.io/advisories/CVE-2026-93294/https://agentprime.io/advisories/CVE-2026-93294/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-14210: Insufficient Granularity of Access Control in GitLabhttps://agentprime.io/advisories/CVE-2026-14210/https://agentprime.io/advisories/CVE-2026-14210/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 01:08:41 GMTCVEAsh field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oraclehttps://agentprime.io/advisories/GHSA-7qr8-wrvq-566q/https://agentprime.io/advisories/GHSA-7qr8-wrvq-566q/ash >=2.11.0-rc.0, <3.33.4, fixed in 3.33.4. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:28:44 GMTHexashCVE-2026-86830: Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Centerhttps://agentprime.io/advisories/CVE-2026-86830/https://agentprime.io/advisories/CVE-2026-86830/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 18:00:41 GMTCVECVE-2026-77480: SQL Server Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77480/https://agentprime.io/advisories/CVE-2026-77480/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 17:18:11 GMTCVECVE-2026-66814: Microsoft SQL Server Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-66814/https://agentprime.io/advisories/CVE-2026-66814/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 17:14:27 GMTCVECVE-2026-69267: Windows Connected User Experiences and Telemetry Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-69267/https://agentprime.io/advisories/CVE-2026-69267/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 17:10:58 GMTCVEAshLua eval read operations can read field-policy-protected fields via aggregateshttps://agentprime.io/advisories/GHSA-5whv-8rcp-x33j/https://agentprime.io/advisories/GHSA-5whv-8rcp-x33j/ash_lua >=0.1.0, <0.2.2, fixed in 0.2.2. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:42:20 GMTHexash_luaAshAi aggregate tool can read field-policy-protected fieldshttps://agentprime.io/advisories/GHSA-v5rw-36x5-r5vx/https://agentprime.io/advisories/GHSA-v5rw-36x5-r5vx/ash_ai >=0.1.0, <1.0.3, fixed in 1.0.3. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:41:45 GMTHexash_aiCVE-2026-15431: HP Support Assistant – Potential Escalation of Privilegehttps://agentprime.io/advisories/CVE-2026-15431/https://agentprime.io/advisories/CVE-2026-15431/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 18:19:14 GMTCVECVE-2026-78122: docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystemshttps://agentprime.io/advisories/CVE-2026-78122/https://agentprime.io/advisories/CVE-2026-78122/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Aug 2026 23:06:32 GMTCVECVE-2026-40145: Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utilityhttps://agentprime.io/advisories/CVE-2026-40145/https://agentprime.io/advisories/CVE-2026-40145/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 16:29:12 GMTCVEThe Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by t...https://agentprime.io/advisories/PYSEC-2026-3714/https://agentprime.io/advisories/PYSEC-2026-3714/apache-airflow-providers-google <22.3.0, fixed in 22.3.0. CVSS 6.5 (Medium). Published by OSV. Not analysed by agentprime yet.Wed, 12 Aug 2026 11:17:10 GMTPyPIapache-airflow-providers-googleCVE-2026-62721: Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62721/https://agentprime.io/advisories/CVE-2026-62721/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:06:00 GMTCVECVE-2025-31938: Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX…: Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6…https://agentprime.io/advisories/CVE-2025-31938/https://agentprime.io/advisories/CVE-2025-31938/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 16:28:08 GMTCVECVE-2026-16560: 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdnhttps://agentprime.io/advisories/CVE-2026-16560/https://agentprime.io/advisories/CVE-2026-16560/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 12:51:43 GMTCVECVE-2026-16106: Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roleshttps://agentprime.io/advisories/CVE-2026-16106/https://agentprime.io/advisories/CVE-2026-16106/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 16:43:16 GMTCVECVE-2026-16108: Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2https://agentprime.io/advisories/CVE-2026-16108/https://agentprime.io/advisories/CVE-2026-16108/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 16:43:14 GMTCVECVE-2026-50502: Windows Event Logging Service Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-50502/https://agentprime.io/advisories/CVE-2026-50502/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:07:50 GMTCVECVE-2026-50405: Windows Filtering Platform Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-50405/https://agentprime.io/advisories/CVE-2026-50405/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:07:06 GMTCVECVE-2026-48581: Surface Broker SDMA Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-48581/https://agentprime.io/advisories/CVE-2026-48581/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:05:46 GMTCVECVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-56155/https://agentprime.io/advisories/CVE-2026-56155/CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 14 Jul 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:05:11 GMTCVEcriticalKEVCVE-2026-55006: Microsoft Exchange Server Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-55006/https://agentprime.io/advisories/CVE-2026-55006/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:04:58 GMTCVECVE-2026-49170: Windows StateRepository API Server file Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-49170/https://agentprime.io/advisories/CVE-2026-49170/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 17:04:29 GMTCVECVE-2026-14615: Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filterhttps://agentprime.io/advisories/CVE-2026-14615/https://agentprime.io/advisories/CVE-2026-14615/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:47:08 GMTCVECVE-2026-14613: Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permissionhttps://agentprime.io/advisories/CVE-2026-14613/https://agentprime.io/advisories/CVE-2026-14613/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:16:44 GMTCVEKeycloak: Information disclosure due to user profile permission bypasshttps://agentprime.io/advisories/GHSA-6g26-7cx5-mrrg/https://agentprime.io/advisories/GHSA-6g26-7cx5-mrrg/org.keycloak:keycloak-services <26.7.0, fixed in 26.7.0. CVSS 2.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 05 Jun 2026 09:33:46 GMTMavenorg.keycloak:keycloak-servicesCVE-2021-46747: Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead…https://agentprime.io/advisories/CVE-2021-46747/https://agentprime.io/advisories/CVE-2021-46747/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:01:27 GMTCVEMLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabledhttps://agentprime.io/advisories/GHSA-8c7q-86fq-vvmh/https://agentprime.io/advisories/GHSA-8c7q-86fq-vvmh/mlflow <3.10.0, fixed in 3.10.0. CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 26 May 2026 13:30:39 GMTPyPImlflowcriticalKeycloak Account Resources user lookup contains broken access controlhttps://agentprime.io/advisories/GHSA-933f-rg6j-f46p/https://agentprime.io/advisories/GHSA-933f-rg6j-f46p/org.keycloak:keycloak-services <26.4.12 || >=26.5.0, <26.6.2, fixed in 26.4.12, 26.6.2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 19 May 2026 12:31:40 GMTMavenorg.keycloak:keycloak-servicesCVE-2025-54518: Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu…https://agentprime.io/advisories/CVE-2025-54518/https://agentprime.io/advisories/CVE-2025-54518/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 03:06:30 GMTCVECVE-2024-21962: Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.https://agentprime.io/advisories/CVE-2024-21962/https://agentprime.io/advisories/CVE-2024-21962/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 01:59:01 GMTCVECVE-2026-35436: Microsoft Office Click-To-Run Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-35436/https://agentprime.io/advisories/CVE-2026-35436/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 16:59:28 GMTCVECVE-2026-40365: Microsoft SharePoint Server Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-40365/https://agentprime.io/advisories/CVE-2026-40365/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 16:59:19 GMTCVE