agentprime: CWE-1284

CVE-2026-94395: Stack-based buffer overflow in SafeNet Authentication Client SIS token engine

Thu, 05 Nov 2026 18:12:54 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-70659: stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name

Thu, 05 Nov 2026 15:26:33 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123011: STMicroelectronics st-mems-android-linux-sensors-hal: STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check…

Thu, 05 Nov 2026 04:24:55 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33972: In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

Thu, 05 Nov 2026 02:37:12 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48176: A memory corruption vulnerability caused by improper validation of messages

Thu, 05 Nov 2026 02:36:58 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119749: GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass

Wed, 04 Nov 2026 16:52:16 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20562: In Modem, there is a possible out of bounds write due to a missing bounds check.

Mon, 02 Nov 2026 02:33:27 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Forge: AES-GCM authentication bypass via unvalidated tagLength option

Fri, 30 Oct 2026 23:02:09 GMT

node-forge <1.4.1, fixed in 1.4.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Fri, 30 Oct 2026 23:02:05 GMT

node-forge <1.4.1, fixed in 1.4.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-115274: Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Fri, 30 Oct 2026 08:57:16 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109821: Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Fri, 30 Oct 2026 08:54:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

zip: AES Entry HMAC Authentication Bypass on Premature EOF

Thu, 29 Oct 2026 16:40:07 GMT

zip >=0.6.0, <9.0.0, fixed in 9.0.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

Wed, 28 Oct 2026 21:17:27 GMT

seroval <1.6.8, fixed in 1.6.8. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-114349: Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

Wed, 28 Oct 2026 16:46:54 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103594: Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

Tue, 27 Oct 2026 15:52:27 GMT

CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

Tue, 27 Oct 2026 13:29:57 GMT

dcmjs <0.52.0, fixed in 0.52.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-107079: An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component

Thu, 22 Oct 2026 00:00:00 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92386: server-set cookie aborts cookie jar load

Tue, 20 Oct 2026 20:17:37 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94024: Module Manager object lookup validates one byte of a module's search name

Tue, 20 Oct 2026 15:18:28 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93475: Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

Tue, 20 Oct 2026 15:04:30 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91041: FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Tue, 20 Oct 2026 13:10:14 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111828: WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Mon, 19 Oct 2026 13:29:02 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112112: nic BIRD: An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an…

Sun, 18 Oct 2026 23:01:05 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

swoosh has email-derived URL path injection in Microsoft Graph endpoint

Fri, 16 Oct 2026 19:22:31 GMT

swoosh >=1.12.0, <1.26.3, fixed in 1.26.3. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-103350: WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

Thu, 15 Oct 2026 17:47:33 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101952: Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

Wed, 14 Oct 2026 17:21:17 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102184: Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

Wed, 14 Oct 2026 16:58:15 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102183: Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes

Wed, 14 Oct 2026 16:58:04 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102033: Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled

Wed, 14 Oct 2026 16:50:18 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102019: Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled

Wed, 14 Oct 2026 16:46:20 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102016: Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled

Wed, 14 Oct 2026 16:45:37 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101987: Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used

Wed, 14 Oct 2026 16:33:12 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102066: Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled

Wed, 14 Oct 2026 16:29:50 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102065: Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled

Wed, 14 Oct 2026 16:20:12 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101974: Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used

Wed, 14 Oct 2026 16:19:41 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102067: Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used

Wed, 14 Oct 2026 16:19:22 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101995: Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption

Wed, 14 Oct 2026 16:19:09 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101985: Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled

Wed, 14 Oct 2026 16:13:42 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109380: modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field

Mon, 12 Oct 2026 20:55:11 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107429: WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability

Mon, 12 Oct 2026 07:44:56 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106605: WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability

Mon, 12 Oct 2026 07:44:09 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107434: WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability

Sat, 10 Oct 2026 19:36:24 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103501: Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

Sat, 10 Oct 2026 10:22:55 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107565: Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

Thu, 08 Oct 2026 14:39:28 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

Mon, 05 Oct 2026 23:42:50 GMT

vllm <0.30.0, fixed in 0.30.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-97275: WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability

Mon, 05 Oct 2026 18:08:36 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103351: WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

Mon, 05 Oct 2026 08:58:21 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103065: WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

Sat, 03 Oct 2026 14:00:11 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Wasmtime wasi:http implementation panics with a zero timeout supplied

Fri, 02 Oct 2026 12:00:00 GMT

wasmtime-wasi-http >=46.0.0, <48.0.4 || >=49.0.0, <49.0.2, fixed in 48.0.4, 49.0.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-94646: Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)

Fri, 02 Oct 2026 11:52:21 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.