<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-138</title><description>Every new CWE-138 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Fortigate syslog message parser can be exploited to modify or delete fields from the original message</title><link>https://agentprime.io/advisories/GHSA-gqr6-r77p-c2pj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gqr6-r77p-c2pj/</guid><description>org.graylog2:graylog2-server &lt;6.3.12 || &gt;=7.0.0, &lt;7.0.7 || &gt;=7.1.0, &lt;7.1.2, fixed in 6.3.12, 7.0.7, 7.1.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 22:13:00 GMT</pubDate><category>Maven</category><category>org.graylog2:graylog2-server</category></item><item><title>CVE-2026-26129: M365 Copilot Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-26129/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26129/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 May 2026 20:58:24 GMT</pubDate><category>CVE</category></item><item><title>Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability </title><link>https://agentprime.io/advisories/GHSA-vmwf-m9c5-3jvc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vmwf-m9c5-3jvc/</guid><description>Microsoft.NetCore.App.Runtime.linux-arm &gt;=8.0.0, &lt;8.0.26 || &gt;=9.0.0, &lt;9.0.15 || &gt;=10.0.0, &lt;10.0.6, fixed in 8.0.26, 9.0.15, 10.0.6. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Apr 2026 23:27:52 GMT</pubDate><category>NuGet</category><category>Microsoft.NetCore.App.Runtime.linux-arm</category><category>Microsoft.NetCore.App.Runtime.linux-arm64</category><category>Microsoft.NetCore.App.Runtime.linux-musl-arm</category><category>Microsoft.NetCore.App.Runtime.linux-musl-arm64</category><category>Microsoft.NetCore.App.Runtime.linux-musl-x64</category><category>Microsoft.NetCore.App.Runtime.linux-x64</category><category>Microsoft.NetCore.App.Runtime.osx-arm64</category><category>Microsoft.NetCore.App.Runtime.osx-x64</category><category>Microsoft.NetCore.App.Runtime.win-arm</category><category>Microsoft.NetCore.App.Runtime.win-arm64</category><category>Microsoft.NetCore.App.Runtime.win-x64</category><category>Microsoft.NetCore.App.Runtime.win-x86</category></item><item><title>CVE-2026-20009: Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-20009/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20009/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 17:06:58 GMT</pubDate><category>CVE</category></item><item><title>tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript</title><link>https://agentprime.io/advisories/GHSA-q43x-79jr-cq98/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-q43x-79jr-cq98/</guid><description>tarteaucitronjs &lt;1.22.0, fixed in 1.22.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Jul 2025 16:59:09 GMT</pubDate><category>npm</category><category>tarteaucitronjs</category></item><item><title>CVE-2025-5878: ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element</title><link>https://agentprime.io/advisories/CVE-2025-5878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5878/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 29 Jun 2025 11:11:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-51500: Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware</title><link>https://agentprime.io/advisories/CVE-2024-51500/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51500/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Nov 2024 23:00:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-38133: Windows Kernel Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-38133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-38133/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Aug 2024 17:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-7012: Improper input validation in Google Chrome</title><link>https://agentprime.io/advisories/CVE-2023-7012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7012/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jul 2024 22:30:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42117: Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42117/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22288: Email HTML Injection</title><link>https://agentprime.io/advisories/CVE-2023-22288/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22288/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Mar 2023 15:33:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-2429: Ultimate SMS Notifications for WooCommerce &lt;= 1.4.1 - CSV Injection</title><link>https://agentprime.io/advisories/CVE-2022-2429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-2429/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Sep 2022 17:18:56 GMT</pubDate><category>CVE</category></item><item><title>Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization</title><link>https://agentprime.io/advisories/GHSA-4hhg-8ghq-vwq6/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4hhg-8ghq-vwq6/</guid><description>org.infinispan:infinispan-core &lt;9.1.0.Final, fixed in 9.1.0.Final. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 13 May 2022 01:38:51 GMT</pubDate><category>Maven</category><category>org.infinispan:infinispan-core</category></item><item><title>CVE-2022-0024: PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit</title><link>https://agentprime.io/advisories/CVE-2022-0024/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0024/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 May 2022 16:30:22 GMT</pubDate><category>CVE</category></item></channel></rss>