<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-140</title><description>Every new CWE-140 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104047: Sssd: sssd: information disclosure via query injection in entra id lookups</title><link>https://agentprime.io/advisories/CVE-2026-104047/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104047/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 19:34:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104040: Sssd: sssd: information disclosure via odata injection in entra id lookups</title><link>https://agentprime.io/advisories/CVE-2026-104040/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104040/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 01:00:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47162: Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name</title><link>https://agentprime.io/advisories/CVE-2026-47162/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47162/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:32:14 GMT</pubDate><category>CVE</category></item><item><title>fast-uri vulnerable to host confusion via percent-encoded authority delimiters</title><link>https://agentprime.io/advisories/GHSA-v39h-62p7-jpjc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-v39h-62p7-jpjc/</guid><description>fast-uri &lt;2.4.1 || &gt;=3.0.0, &lt;3.1.2, fixed in 2.4.1, 3.1.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 19:13:01 GMT</pubDate><category>npm</category><category>fast-uri</category></item><item><title>CVE-2026-33457: Potential livestatus injection in prediction graph page</title><link>https://agentprime.io/advisories/CVE-2026-33457/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33457/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Apr 2026 08:31:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33456: Potential livestatus injection in notification test</title><link>https://agentprime.io/advisories/CVE-2026-33456/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33456/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Apr 2026 08:31:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33455: Livestatus injection in monitoring quicksearch</title><link>https://agentprime.io/advisories/CVE-2026-33455/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33455/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Apr 2026 08:30:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21691: iccDEV has Type Confusion in CIccTag:IsTypeCompressed()</title><link>https://agentprime.io/advisories/CVE-2026-21691/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21691/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Jan 2026 21:53:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52989: Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration</title><link>https://agentprime.io/advisories/CVE-2025-52989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52989/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jul 2025 15:10:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32918: Livestatus injection in autocomplete endpoint</title><link>https://agentprime.io/advisories/CVE-2025-32918/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32918/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Jul 2025 08:12:21 GMT</pubDate><category>CVE</category></item><item><title>OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint</title><link>https://agentprime.io/advisories/GHSA-9wj4-8h85-pgrw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9wj4-8h85-pgrw/</guid><description>octoprint &lt;1.11.2, fixed in 1.11.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Jun 2025 20:14:43 GMT</pubDate><category>PyPI</category><category>octoprint</category></item><item><title>CVE-2024-38866: Livestatus Injection in dynmaps</title><link>https://agentprime.io/advisories/CVE-2024-38866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-38866/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 May 2025 07:01:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47779: Using malformed From header can forge identity with &quot;;&quot; or NULL in name portion</title><link>https://agentprime.io/advisories/CVE-2025-47779/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47779/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 May 2025 16:54:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-38865: Livestatus command injection in RestAPI</title><link>https://agentprime.io/advisories/CVE-2024-38865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-38865/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Apr 2025 07:35:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42392: Improper Neutralization of Delimiters in Mongoose Web Server library</title><link>https://agentprime.io/advisories/CVE-2024-42392/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42392/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Nov 2024 09:07:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42385: Improper Neutralization of Delimiters in Mongoose Web Server library</title><link>https://agentprime.io/advisories/CVE-2024-42385/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42385/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Nov 2024 09:05:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42482: fish-shop/syntax-check Improper Neutralization of Delimiters</title><link>https://agentprime.io/advisories/CVE-2024-42482/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42482/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Aug 2024 15:35:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6542: Livestatus injection in mknotifyd</title><link>https://agentprime.io/advisories/CVE-2024-6542/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6542/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Jul 2024 09:50:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6157: Livestatus injection in ajax_search</title><link>https://agentprime.io/advisories/CVE-2023-6157/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6157/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Nov 2023 16:24:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6156: Livestatus injection in availability timeline</title><link>https://agentprime.io/advisories/CVE-2023-6156/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6156/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Nov 2023 16:24:15 GMT</pubDate><category>CVE</category></item><item><title>Field injection in the KirbyData text storage handler</title><link>https://agentprime.io/advisories/GHSA-x5mr-p6v4-wp93/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-x5mr-p6v4-wp93/</guid><description>getkirby/cms &lt;3.5.8.3 || &gt;=3.6.0, &lt;3.6.6.3 || &gt;=3.7.0, &lt;3.7.5.2 || &gt;=3.8.0, &lt;3.8.4.1 || &gt;=3.9.0, &lt;3.9.6, fixed in 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jul 2023 15:35:47 GMT</pubDate><category>Packagist</category><category>getkirby/cms</category></item><item><title>CVE-2023-31208: Livestatus command injection in RestAPI</title><link>https://agentprime.io/advisories/CVE-2023-31208/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31208/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 May 2023 08:24:59 GMT</pubDate><category>CVE</category></item></channel></rss>