<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1295</title><description>Every new CWE-1295 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28811: Apache JSPWiki: Error Handling - Reveals Error Details</title><link>https://agentprime.io/advisories/CVE-2026-28811/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28811/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 15:51:27 GMT</pubDate><category>CVE</category></item><item><title>Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication</title><link>https://agentprime.io/advisories/GHSA-f65r-h4g3-3h9h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-f65r-h4g3-3h9h/</guid><description>@mcptoolshop/backpropagate &gt;=1.1.0, &lt;1.2.0, fixed in 1.2.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 20:34:29 GMT</pubDate><category>npm</category><category>@mcptoolshop/backpropagate</category><category>PyPI</category><category>backpropagate</category><category>critical</category></item><item><title>CVE-2025-59109: UART Leaking Sensitive Data in dormakaba registration unit 9002</title><link>https://agentprime.io/advisories/CVE-2025-59109/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59109/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 10:06:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46775: Fortinet FortiExtender: A debug messages revealing unnecessary information vulnerability in Fortinet…</title><link>https://agentprime.io/advisories/CVE-2025-46775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46775/</guid><description>CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 17:01:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12910: Google Chrome: Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed…</title><link>https://agentprime.io/advisories/CVE-2025-12910/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12910/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Nov 2025 23:23:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-35031: Medical Informatics Engineering Enterprise Health includes session token in debug output</title><link>https://agentprime.io/advisories/CVE-2025-35031/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-35031/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Sep 2025 20:00:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-42604: Detailed Error Response Vulnerability in Meon KYC solutions</title><link>https://agentprime.io/advisories/CVE-2025-42604/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-42604/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Apr 2025 10:43:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2469: Debug Messages Revealing Unnecessary Information in GitLab</title><link>https://agentprime.io/advisories/CVE-2025-2469/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2469/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Apr 2025 13:30:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-31001: WordPress GTM Kit plugin &lt;= 2.4.0 - Sensitive Data Exposure vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-31001/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-31001/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Apr 2025 05:32:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2877: Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda</title><link>https://agentprime.io/advisories/CVE-2025-2877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2877/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Mar 2025 14:05:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20643: In DA, there is a possible out of bounds read due to a missing bounds check.</title><link>https://agentprime.io/advisories/CVE-2025-20643/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20643/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Feb 2025 03:24:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11217: Oauth-server-container: oauth-server-container logs client secret in debug level</title><link>https://agentprime.io/advisories/CVE-2024-11217/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11217/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 Nov 2024 20:48:46 GMT</pubDate><category>CVE</category></item><item><title>Apache Airflow: Sensitive configuration values are not masked in the logs by default</title><link>https://agentprime.io/advisories/GHSA-46c3-5xc5-wwhv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-46c3-5xc5-wwhv/</guid><description>airflow &lt;2.10.3, fixed in 2.10.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 15 Nov 2024 09:32:29 GMT</pubDate><category>PyPI</category><category>airflow</category></item><item><title>Aimeos HTML client may potentially reveal sensitive information in error log</title><link>https://agentprime.io/advisories/GHSA-ppm5-jv84-2xg2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-ppm5-jv84-2xg2/</guid><description>aimeos/ai-client-html &gt;=2021.10.1, &lt;2021.10.22 || &gt;=2022.04.1, &lt;2022.10.13 || &gt;=2023.04.1, &lt;2023.10.15 || &gt;=2024.04.1, &lt;2024.04.7, fixed in 2021.10.22, 2022.10.13, 2023.10.15, 2024.04.7. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Jun 2024 17:26:56 GMT</pubDate><category>Packagist</category><category>aimeos/ai-client-html</category></item><item><title>CVE-2024-27179: Session disclosure inside the log files</title><link>https://agentprime.io/advisories/CVE-2024-27179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27179/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Jun 2024 04:09:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-5392: Honeywell C300: C300 information leak due to an analysis feature which allows extracting more memory over…</title><link>https://agentprime.io/advisories/CVE-2023-5392/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-5392/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Apr 2024 19:19:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28077: Dell BSAFE SSL-J: Dell BSAFE SSL-J, versions prior to 6.5…</title><link>https://agentprime.io/advisories/CVE-2023-28077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28077/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Feb 2024 03:11:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4215: Advantech WebAccess Debug Messages Revealing Unnecessary Information</title><link>https://agentprime.io/advisories/CVE-2023-4215/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4215/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Oct 2023 23:40:37 GMT</pubDate><category>CVE</category></item><item><title>Vaadin vulnerable to possible information disclosure of class and method names in RPC response</title><link>https://agentprime.io/advisories/GHSA-ch48-9r3q-pv7x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-ch48-9r3q-pv7x/</guid><description>com.vaadin:flow-server &gt;=1.0.0, &lt;1.0.21 || &gt;=1.1.0, &lt;2.9.3 || &gt;=3.0.0, &lt;9.1.2 || &gt;=23.0.0, &lt;23.3.13 || &gt;=24.0.0, &lt;24.0.9 || &gt;=24.1.alpha1, &lt;24.1.0, fixed in 1.0.21, 2.9.3, 9.1.2, 23.3.13, 24.0.9, 24.1.0. CVSS 3.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Jun 2023 20:01:03 GMT</pubDate><category>Maven</category><category>com.vaadin:flow-server</category><category>com.vaadin:vaadin</category></item><item><title>CVE-2022-27597: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)</title><link>https://agentprime.io/advisories/CVE-2022-27597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-27597/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-34364: Dell BSAFE SSL-J: Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing…</title><link>https://agentprime.io/advisories/CVE-2022-34364/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-34364/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Feb 2023 19:13:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25476: An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.</title><link>https://agentprime.io/advisories/CVE-2021-25476/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25476/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Oct 2021 17:08:38 GMT</pubDate><category>CVE</category></item><item><title>Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19</title><link>https://agentprime.io/advisories/GHSA-qrg9-f472-qwfm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qrg9-f472-qwfm/</guid><description>com.vaadin:vaadin-bom &gt;=10.0.0, &lt;10.0.19 || &gt;=11.0.0, &lt;14.6.2 || &gt;=15.0.0, &lt;19.0.9, fixed in 10.0.19, 14.6.2, 19.0.9. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Jun 2021 16:55:58 GMT</pubDate><category>Maven</category><category>com.vaadin:vaadin-bom</category></item></channel></rss>