agentprime: CWE-1259Every new CWE-1259 Advisory and CVE.https://agentprime.io/CVE-2026-117635: Gitea admin API public-only token scope bypasshttps://agentprime.io/advisories/CVE-2026-117635/https://agentprime.io/advisories/CVE-2026-117635/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:40 GMTCVECVE-2026-76413: Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-76413/https://agentprime.io/advisories/CVE-2026-76413/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:11:51 GMTCVEPterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissionshttps://agentprime.io/advisories/GHSA-8r6w-3qq5-4p4r/https://agentprime.io/advisories/GHSA-8r6w-3qq5-4p4r/github.com/pterodactyl/wings <1.12.2, fixed in 1.12.2. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 28 Jul 2026 15:43:25 GMTGogithub.com/pterodactyl/wingsPackagistpterodactyl/panelGitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpointshttps://agentprime.io/advisories/GHSA-fq2p-5p22-8g6j/https://agentprime.io/advisories/GHSA-fq2p-5p22-8g6j/code.gitea.io/gitea <1.27.0, fixed in 1.27.0. CVSS 4.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 21 Jul 2026 21:56:04 GMTGocode.gitea.io/giteaApache Answer: AdminToken not invalidated after admin deactivationhttps://agentprime.io/advisories/GHSA-4gw2-vg4x-7p29/https://agentprime.io/advisories/GHSA-4gw2-vg4x-7p29/github.com/apache/answer <2.0.1, fixed in 2.0.1. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 10 Jun 2026 18:31:45 GMTGogithub.com/apache/answergithub.com/apache/incubator-answerOpenBao's Token Store Allows Cross-Namespace Renewal, Revocationhttps://agentprime.io/advisories/GHSA-p49j-v9wc-wg57/https://agentprime.io/advisories/GHSA-p49j-v9wc-wg57/github.com/openbao/openbao <0.0.0-20260420162526-f58111d2ca54, fixed in 0.0.0-20260420162526-f58111d2ca54. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:27:42 GMTGogithub.com/openbao/openbaojose4j is vulnerable to DoS via compressed JWE contenthttps://agentprime.io/advisories/GHSA-3677-xxcr-wjqv/https://agentprime.io/advisories/GHSA-3677-xxcr-wjqv/org.bitbucket.b_c:jose4j <0.9.6, fixed in 0.9.6. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 17 Dec 2025 18:31:33 GMTMavenorg.bitbucket.b_c:jose4jCVE-2025-56676: TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality.https://agentprime.io/advisories/CVE-2025-56676/https://agentprime.io/advisories/CVE-2025-56676/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 00:00:00 GMTCVECVE-2025-56207: A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to tr…https://agentprime.io/advisories/CVE-2025-56207/https://agentprime.io/advisories/CVE-2025-56207/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 00:00:00 GMTCVECVE-2024-4598: Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediatorhttps://agentprime.io/advisories/CVE-2024-4598/https://agentprime.io/advisories/CVE-2024-4598/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 10:39:16 GMTCVECVE-2025-50579: A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin header.https://agentprime.io/advisories/CVE-2025-50579/https://agentprime.io/advisories/CVE-2025-50579/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 00:00:00 GMTCVECVE-2025-51306: In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management.https://agentprime.io/advisories/CVE-2025-51306/https://agentprime.io/advisories/CVE-2025-51306/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Aug 2025 00:00:00 GMTCVECVE-2025-27955: Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary…https://agentprime.io/advisories/CVE-2025-27955/https://agentprime.io/advisories/CVE-2025-27955/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jun 2025 00:00:00 GMTCVECVE-2024-45448: Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.https://agentprime.io/advisories/CVE-2024-45448/https://agentprime.io/advisories/CVE-2024-45448/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Sep 2024 02:19:20 GMTCVEAAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identityhttps://agentprime.io/advisories/GHSA-p82q-rxpm-hjpc/https://agentprime.io/advisories/GHSA-p82q-rxpm-hjpc/github.com/Azure/aad-pod-identity <1.8.13, fixed in 1.8.13. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 21 Aug 2024 16:03:59 GMTGogithub.com/Azure/aad-pod-identityVolcano has insecure permissions in volcano.sh/volcanohttps://agentprime.io/advisories/GHSA-5g3x-8g2v-r8x8/https://agentprime.io/advisories/GHSA-5g3x-8g2v-r8x8/volcano.sh/volcano <1.10.0-alpha.0, fixed in 1.10.0-alpha.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 06 Aug 2024 22:03:16 GMTGovolcano.sh/volcanocriticalbiscuit-java vulnerable to public key confusion in third party blockhttps://agentprime.io/advisories/GHSA-5hcj-rwm6-xmw4/https://agentprime.io/advisories/GHSA-5hcj-rwm6-xmw4/org.biscuitsec:biscuit >=3.0.0, <4.0.0, fixed in 4.0.0. CVSS 3.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 31 Jul 2024 18:48:40 GMTMavenorg.biscuitsec:biscuitCVE-2024-36111: KubePi's JWT token validation has a defecthttps://agentprime.io/advisories/CVE-2024-36111/https://agentprime.io/advisories/CVE-2024-36111/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jul 2024 13:26:13 GMTCVEjsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAChttps://agentprime.io/advisories/GHSA-hjrf-2m68-5959/https://agentprime.io/advisories/GHSA-hjrf-2m68-5959/jsonwebtoken <9.0.0, fixed in 9.0.0. CVSS 5.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 22 Dec 2022 03:33:19 GMTnpmjsonwebtoken