agentprime: CWE-155

Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug

Wed, 23 Sep 2026 16:11:18 GMT

io.moquette:moquette-broker <0.18.1, fixed in 0.18.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

Thu, 10 Sep 2026 21:23:25 GMT

open-webui >=0.6.41, <0.11.1, fixed in 0.11.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-68939: Pyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual)

Tue, 18 Aug 2026 15:11:10 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Shescape: Path disclosure on Unix with Zsh

Fri, 24 Jul 2026 22:33:38 GMT

shescape <2.1.14 || >=3.0.0, <3.0.1, fixed in 2.1.14, 3.0.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-49482: ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite

Thu, 11 Jun 2026 22:55:17 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

Fri, 20 Mar 2026 20:34:59 GMT

aws-lc-sys >=0.32.0, <0.39.0, fixed in 0.39.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-11757: Improper Neutralization of Wildcards or Matching Symbols in CloudEdge Online Cameras and App

Tue, 21 Oct 2025 17:24:54 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-4232: GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

Thu, 12 Jun 2025 23:22:34 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

laravel-crud-wizard-free has File Validation Bypass

Wed, 12 Mar 2025 15:56:23 GMT

macropay-solutions/laravel-crud-wizard-free <3.4.17, fixed in 3.4.17. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Laravel has a File Validation Bypass

Wed, 05 Mar 2025 19:09:39 GMT

laravel/framework <10.48.29 || >=11.0.0, <11.44.1 || >=12.0.0, <12.1.1, fixed in 10.48.29, 11.44.1, 12.1.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller

Tue, 04 Feb 2025 22:06:11 GMT

github.com/kubewarden/kubewarden-controller >=1.7.0, <1.21.0, fixed in 1.21.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-0681: New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

Thu, 30 Jan 2025 18:53:09 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0106: Expedition: Wildcard Expansion Vulnerability

Sat, 11 Jan 2025 03:02:24 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47791: Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols

Fri, 06 Dec 2024 18:16:07 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8688: PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

Wed, 11 Sep 2024 16:40:50 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-6509: Resource allocation without limits in Axis Communications AB AXIS OS

Tue, 10 Sep 2024 04:58:28 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb

Wed, 21 Aug 2024 14:30:26 GMT

github.com/authzed/spicedb >=1.3.0, <1.4.0, fixed in 1.4.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-0055: Axis Communications AB AXIS OS: Sandro Poppi, member of the AXIS OS Bug Bounty Program…

Tue, 19 Mar 2024 06:39:24 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-0054: Axis Communications AB AXIS OS: Sandro Poppi, member of the AXIS OS Bug Bounty Program…

Tue, 19 Mar 2024 06:35:15 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-1772: Information Disclosure

Fri, 27 Mar 2020 12:47:49 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Improper Neutralization of Wildcards or Matching Symbols

Tue, 04 Jun 2019 15:42:15 GMT

org.springframework.data:spring-data-jpa >=2.1.0, <2.1.8 || >=2.0.0, <2.1.8 || <1.11.22, fixed in 2.1.8, 1.11.22. CVSS 3.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.