agentprime: CWE-1288

CVE-2026-89317: JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)

Fri, 23 Oct 2026 08:50:22 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94200: TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

Wed, 14 Oct 2026 16:55:23 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102047: Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used

Wed, 14 Oct 2026 16:53:00 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101951: Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

Wed, 14 Oct 2026 16:20:38 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

`@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction

Thu, 24 Sep 2026 19:32:00 GMT

@bsv/wallet-toolbox >=1.1.47, <2.4.0, fixed in 2.4.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-69793: Windows TCP/IP Security Feature Bypass Vulnerability

Tue, 08 Sep 2026 17:16:31 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18238: OOBR in rpcap client in libpcap before 1.10.7

Sat, 05 Sep 2026 18:51:57 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18794: OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

Wed, 26 Aug 2026 09:29:57 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73219: CVAT: Denial of service with regards to automatic annotation

Tue, 11 Aug 2026 17:50:29 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18209: Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check

Fri, 31 Jul 2026 07:08:31 GMT

CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15943: Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

Fri, 17 Jul 2026 11:49:49 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Tue, 14 Jul 2026 17:04:14 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14781: Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email

Sun, 05 Jul 2026 06:55:30 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46117: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Thu, 28 May 2026 09:35:32 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak Services has Improper Validation of Consistency within Input

Wed, 27 May 2026 12:31:24 GMT

org.keycloak:keycloak-services >=26.5.0, <=26.6.4 || <=26.4.7, no fixed version yet. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl

Fri, 01 May 2026 13:56:06 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenStack Keystone has an Incorrect Authorization Issue

Fri, 01 May 2026 09:30:25 GMT

keystone >=13.0.0, <=29.0.1, no fixed version yet. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-31488: drm/amd/display: Do not skip unrelated mode changes in DSC validation

Wed, 22 Apr 2026 13:54:12 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place

Wed, 22 Apr 2026 08:15:10 GMT

CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 1 May 2026: it is known to be exploited. CVSS score 7.8 (7.0 or more) and EPSS 0.98 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-50976: Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB

Mon, 02 Feb 2026 14:08:24 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

Thu, 30 Oct 2025 00:31:03 GMT

drupal/reverse_proxy_header <1.1.2, fixed in 1.1.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-9999: Improper validation of payload elements

Fri, 05 Sep 2025 16:41:01 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

Wed, 28 May 2025 18:03:41 GMT

vllm >=0.7.0, <0.9.0, fixed in 0.9.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-12093: Improper Validation of Consistency within Input in GitLab

Thu, 22 May 2025 14:32:04 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

tough root metadata version is not checked for sequential versioning

Fri, 28 Mar 2025 22:12:36 GMT

tough <0.20.0, fixed in 0.20.0. CVSS 5.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-8305: MongoDB Server secondaries may crash due to forced index constraints

Mon, 21 Oct 2024 14:10:31 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-39515: Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash

Wed, 09 Oct 2024 20:00:39 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-5953: 389-ds-base: malformed userpassword hash may cause denial of service

Tue, 18 Jun 2024 10:01:56 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27371: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330.

Wed, 05 Jun 2024 18:41:01 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27375: An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330.

Wed, 05 Jun 2024 18:38:14 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31140: JetBrains TeamCity: In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files…

Thu, 28 Mar 2024 15:07:18 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31136: In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

Thu, 28 Mar 2024 15:07:15 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-25951: A command injection vulnerability exists in local RACADM.

Sat, 09 Mar 2024 05:56:20 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

Candid infinite decoding loop through specially crafted payload

Fri, 08 Dec 2023 15:23:22 GMT

candid >=0.9.0, <0.9.10, fixed in 0.9.10. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-32701: Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

Tue, 14 Nov 2023 18:33:59 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-1620: WAGO: DoS in multiple products in multiple versions using Codesys

Mon, 26 Jun 2023 06:19:30 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-1619: WAGO: DoS in multiple versions of multiple products

Mon, 26 Jun 2023 06:18:33 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

xmldom allows multiple root nodes in a DOM

Tue, 01 Nov 2022 17:29:11 GMT

xmldom <=0.6.0, no fixed version yet. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-41531: Invalid RPKI data could disable Route Origin Validation on RTR clients.

Tue, 21 Sep 2021 13:23:17 GMT

Published by the CVE Program. Not analysed by agentprime yet.