<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1240</title><description>Every new CWE-1240 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-8374: Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication</title><link>https://agentprime.io/advisories/CVE-2026-8374/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8374/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 12:09:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68833: HCL Hive is affected by use of a cryptographic primitive with a risky implementation</title><link>https://agentprime.io/advisories/CVE-2025-68833/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68833/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:42:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21751: HCL Hive is affected by use of a cryptographic primitive with a risky implementation</title><link>https://agentprime.io/advisories/CVE-2026-21751/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21751/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:18:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-50303: Windows Key Guard Security Feature Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-50303/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50303/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 17:06:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44410: Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE</title><link>https://agentprime.io/advisories/CVE-2026-44410/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44410/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 May 2026 09:39:55 GMT</pubDate><category>CVE</category></item><item><title>Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss</title><link>https://agentprime.io/advisories/GHSA-vj64-rjf3-w3v7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vj64-rjf3-w3v7/</guid><description>p3-challenger &lt;0.4.3 || &gt;=0.5.0, &lt;0.5.3, fixed in 0.4.3, 0.5.3. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 21 May 2026 20:24:21 GMT</pubDate><category>crates.io</category><category>p3-challenger</category></item><item><title>Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor</title><link>https://agentprime.io/advisories/GHSA-h468-7pvh-8vr8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h468-7pvh-8vr8/</guid><description>org.apache.tomcat:tomcat &gt;=9.0.13, &lt;9.0.116 || &gt;=10.1.50, &lt;10.1.53 || &gt;=11.0.0-M1, &lt;11.0.20 || &gt;=8.5.38, &lt;=8.5.100 || &gt;=7.0.100, &lt;=7.0.109, fixed in 9.0.116, 10.1.53, 11.0.20. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Apr 2026 21:31:29 GMT</pubDate><category>Maven</category><category>org.apache.tomcat:tomcat</category><category>org.apache.tomcat:tomcat-tribes</category></item><item><title>libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure</title><link>https://agentprime.io/advisories/GHSA-434v-x5qv-pmh6/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-434v-x5qv-pmh6/</guid><description>libcrux-ed25519 &lt;0.0.7, fixed in 0.0.7. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 17:58:55 GMT</pubDate><category>crates.io</category><category>libcrux-ed25519</category></item><item><title>CVE-2025-64647: Multiple Vulnerabilities in IBM Concert Software</title><link>https://agentprime.io/advisories/CVE-2025-64647/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64647/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Mar 2026 20:37:23 GMT</pubDate><category>CVE</category></item><item><title>uTLS has a fingerprint vulnerability from GREASE ECH mismatch for Chrome parrots</title><link>https://agentprime.io/advisories/GHSA-7m29-f4hw-g2vx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7m29-f4hw-g2vx/</guid><description>github.com/refraction-networking/utls &gt;=1.6.0, &lt;1.8.1, fixed in 1.8.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Feb 2026 22:33:18 GMT</pubDate><category>Go</category><category>github.com/refraction-networking/utls</category></item><item><title>CVE-2025-62514: `libparsec_crypto` does not check for weak order point of curve 25519</title><link>https://agentprime.io/advisories/CVE-2025-62514/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62514/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Jan 2026 15:46:50 GMT</pubDate><category>CVE</category></item><item><title>Elliptic Uses a Cryptographic Primitive with a Risky Implementation</title><link>https://agentprime.io/advisories/GHSA-848j-6mx2-7j84/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-848j-6mx2-7j84/</guid><description>elliptic &lt;=6.6.1, no fixed version yet. CVSS 5.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Jan 2026 21:30:34 GMT</pubDate><category>npm</category><category>elliptic</category></item><item><title>Apache StreamPark: Use the user’s password as the secret key Vulnerability</title><link>https://agentprime.io/advisories/GHSA-3hg2-rh4r-8qf6/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3hg2-rh4r-8qf6/</guid><description>org.apache.streampark:streampark &gt;=2.0.0, &lt;2.1.7, fixed in 2.1.7. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Dec 2025 18:30:35 GMT</pubDate><category>Maven</category><category>org.apache.streampark:streampark</category></item><item><title>Timing side-channel in ML-DSA decomposition</title><link>https://agentprime.io/advisories/GHSA-hcp2-x6j4-29j7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hcp2-x6j4-29j7/</guid><description>ml-dsa &gt;=0.0.0-0, &lt;0.1.0-rc.3, fixed in 0.1.0-rc.3. CVSS 6.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Dec 2025 12:00:00 GMT</pubDate><category>crates.io</category><category>ml-dsa</category></item><item><title>CVE-2025-46424: Dell CloudLink: Dell CloudLink, versions prior to 8.2…</title><link>https://agentprime.io/advisories/CVE-2025-46424/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46424/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Nov 2025 16:46:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58720: Windows Cryptographic Services Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-58720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58720/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 17:01:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-29808: Windows Cryptographic Services Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-29808/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-29808/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 17:24:16 GMT</pubDate><category>CVE</category></item><item><title>Post-Quantum Secure Feldman&apos;s Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`</title><link>https://agentprime.io/advisories/GHSA-r8gc-qc2c-c7vh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r8gc-qc2c-c7vh/</guid><description>postquantum-feldman-vss &lt;=0.8.0b2, no fixed version yet. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Mar 2025 19:55:17 GMT</pubDate><category>PyPI</category><category>postquantum-feldman-vss</category></item><item><title>CVE-2025-22475: Dell PowerProtect DD: Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50…</title><link>https://agentprime.io/advisories/CVE-2025-22475/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22475/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Feb 2025 02:19:38 GMT</pubDate><category>CVE</category></item><item><title>Soundness issue with Plonky2 look up tables</title><link>https://agentprime.io/advisories/GHSA-hj49-h7fq-px5h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hj49-h7fq-px5h/</guid><description>plonky2 &gt;=1.0.0, &lt;1.0.1, fixed in 1.0.1. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jan 2025 19:28:51 GMT</pubDate><category>crates.io</category><category>plonky2</category></item><item><title>PQClean has a correctness error in HQC decapsulation</title><link>https://agentprime.io/advisories/GHSA-753p-wrj5-g8fj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-753p-wrj5-g8fj/</guid><description>pqcrypto-hqc &lt;0.2.1, fixed in 0.2.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Dec 2024 21:47:37 GMT</pubDate><category>crates.io</category><category>pqcrypto-hqc</category></item><item><title>CVE-2024-37137: Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability.</title><link>https://agentprime.io/advisories/CVE-2024-37137/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37137/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jun 2024 01:33:42 GMT</pubDate><category>CVE</category></item><item><title>Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior</title><link>https://agentprime.io/advisories/GHSA-7852-w36x-6mf6/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7852-w36x-6mf6/</guid><description>laravel/framework &lt;5.5.40 || &gt;=5.6.0, &lt;5.6.15, fixed in 5.5.40, 5.6.15. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 15 May 2024 22:08:06 GMT</pubDate><category>Packagist</category><category>laravel/framework</category></item><item><title>Laravel Encrypter Failure to decryption vulnerability</title><link>https://agentprime.io/advisories/GHSA-6wjw-qf87-fv5v/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6wjw-qf87-fv5v/</guid><description>illuminate/encryption &gt;=5.5.0, &lt;5.5.40 || &gt;=5.6.0, &lt;5.6.15, fixed in 5.5.40, 5.6.15. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 15 May 2024 22:01:01 GMT</pubDate><category>Packagist</category><category>illuminate/encryption</category></item><item><title>CVE-2023-51392: Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM</title><link>https://agentprime.io/advisories/CVE-2023-51392/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-51392/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Feb 2024 16:12:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0220: B&amp;R products use insufficient communication encryption</title><link>https://agentprime.io/advisories/CVE-2024-0220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0220/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Feb 2024 10:15:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0323: FTP uses unsecure encryption mechanisms</title><link>https://agentprime.io/advisories/CVE-2024-0323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0323/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Feb 2024 16:05:47 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>scalarmult() vulnerable to degenerate public keys</title><link>https://agentprime.io/advisories/GHSA-2wc6-2rcj-8v76/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2wc6-2rcj-8v76/</guid><description>sodiumoxide &lt;0.0.14, fixed in 0.0.14. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Aug 2021 21:00:41 GMT</pubDate><category>crates.io</category><category>sodiumoxide</category></item></channel></rss>