agentprime: CWE-158Every new CWE-158 Advisory and CVE.https://agentprime.io/CVE-2026-115473: Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)https://agentprime.io/advisories/CVE-2026-115473/https://agentprime.io/advisories/CVE-2026-115473/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:40:39 GMTCVECVE-2026-105475: WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail…https://agentprime.io/advisories/CVE-2026-105475/https://agentprime.io/advisories/CVE-2026-105475/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 21:05:16 GMTCVECVE-2026-116566: socket.getaddrinfo() accepts embedded null bytes in host and porthttps://agentprime.io/advisories/CVE-2026-116566/https://agentprime.io/advisories/CVE-2026-116566/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 17:45:47 GMTCVECVE-2026-118767: Botan: Python binding bcrypt APIs truncate passwords containing embedded NULshttps://agentprime.io/advisories/CVE-2026-118767/https://agentprime.io/advisories/CVE-2026-118767/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 17:17:24 GMTCVECVE-2026-84790: Authentication bypass by spoofing in OpenVPNhttps://agentprime.io/advisories/CVE-2026-84790/https://agentprime.io/advisories/CVE-2026-84790/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 21:39:05 GMTCVECVE-2026-92705: Aegisub executes arbitrary code through automatically loaded Automation scriptshttps://agentprime.io/advisories/CVE-2026-92705/https://agentprime.io/advisories/CVE-2026-92705/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 20:37:58 GMTCVECVE-2026-105240: Apache log4net: NUL character truncates OutputDebugStringAppender recordshttps://agentprime.io/advisories/CVE-2026-105240/https://agentprime.io/advisories/CVE-2026-105240/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:47:44 GMTCVECVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender recordshttps://agentprime.io/advisories/CVE-2026-105239/https://agentprime.io/advisories/CVE-2026-105239/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:46:33 GMTCVECVE-2026-76354: Path Traversal through Search Head Clustering in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76354/https://agentprime.io/advisories/CVE-2026-76354/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:47 GMTCVEElectron: shell.openPath path validation bypass via embedded null bytehttps://agentprime.io/advisories/GHSA-5c9j-mhmv-5xgx/https://agentprime.io/advisories/GHSA-5c9j-mhmv-5xgx/electron <39.8.6 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.1.1 || >=42.0.0-alpha.1, <42.0.0-beta.1, fixed in 39.8.6, 40.9.0, 41.1.1, 42.0.0-beta.1. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:57:03 GMTnpmelectronCVE-2026-47778: Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass)https://agentprime.io/advisories/CVE-2026-47778/https://agentprime.io/advisories/CVE-2026-47778/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 17:27:57 GMTCVECVE-2026-43895: jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifactshttps://agentprime.io/advisories/CVE-2026-43895/https://agentprime.io/advisories/CVE-2026-43895/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:24:02 GMTCVECVE-2026-41256: jq: Embedded NUL truncates top-level jq programs loaded with -fhttps://agentprime.io/advisories/CVE-2026-41256/https://agentprime.io/advisories/CVE-2026-41256/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:18:30 GMTCVECVE-2026-43861: mutt before 2.3.2 does not check for '\0' in url_pct_decode.https://agentprime.io/advisories/CVE-2026-43861/https://agentprime.io/advisories/CVE-2026-43861/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 05:52:59 GMTCVECVE-2026-43859: mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.https://agentprime.io/advisories/CVE-2026-43859/https://agentprime.io/advisories/CVE-2026-43859/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 05:41:07 GMTCVECVE-2026-23863: An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename to be shown in the a…https://agentprime.io/advisories/CVE-2026-23863/https://agentprime.io/advisories/CVE-2026-23863/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 May 2026 16:01:39 GMTCVEfree5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Errorhttps://agentprime.io/advisories/GHSA-p9hg-pq3q-v9gv/https://agentprime.io/advisories/GHSA-p9hg-pq3q-v9gv/github.com/free5gc/udm <1.4.2, fixed in 1.4.2. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 18 Mar 2026 20:11:15 GMTGogithub.com/free5gc/udmCVE-2026-4359: Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated bufferhttps://agentprime.io/advisories/CVE-2026-4359/https://agentprime.io/advisories/CVE-2026-4359/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 19:42:03 GMTCVECVE-2026-28540: Out-of-bounds character read vulnerability in Bluetooth.https://agentprime.io/advisories/CVE-2026-28540/https://agentprime.io/advisories/CVE-2026-28540/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 07:55:01 GMTCVECVE-2025-14388: PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injectionhttps://agentprime.io/advisories/CVE-2025-14388/https://agentprime.io/advisories/CVE-2025-14388/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Dec 2025 09:20:03 GMTCVEcriticalCVE-2025-66263: Unauthenticated Arbitrary File Read via Null Byte Injectionhttps://agentprime.io/advisories/CVE-2025-66263/https://agentprime.io/advisories/CVE-2025-66263/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 00:52:24 GMTCVECVE-2025-61985: OpenBSD OpenSSH: ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI…https://agentprime.io/advisories/CVE-2025-61985/https://agentprime.io/advisories/CVE-2025-61985/CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Oct 2025 00:00:00 GMTCVECVE-2025-9648: Denial of Service in CivetWebhttps://agentprime.io/advisories/CVE-2025-9648/https://agentprime.io/advisories/CVE-2025-9648/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 11:47:56 GMTCVECVE-2025-55113: BMC Control-M/Agent unescaped NULL byte in access control list checkshttps://agentprime.io/advisories/CVE-2025-55113/https://agentprime.io/advisories/CVE-2025-55113/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Sep 2025 12:20:03 GMTCVEcriticalCVE-2025-47812: wftpserver Wing FTP Server: In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes…https://agentprime.io/advisories/CVE-2025-47812/https://agentprime.io/advisories/CVE-2025-47812/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 14 Jul 2025: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.94 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 00:00:00 GMTCVEcriticalKEVCVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contentshttps://agentprime.io/advisories/CVE-2025-1936/https://agentprime.io/advisories/CVE-2025-1936/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 13:31:26 GMTCVECVE-2024-10921: Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Serverhttps://agentprime.io/advisories/CVE-2024-10921/https://agentprime.io/advisories/CVE-2024-10921/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Nov 2024 16:04:04 GMTCVECVE-2024-9026: PHP-FPM logs from children may be alteredhttps://agentprime.io/advisories/CVE-2024-9026/https://agentprime.io/advisories/CVE-2024-9026/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 04:07:33 GMTCVECVE-2024-0408: Xorg-x11-server: selinux unlabeled glx pbufferhttps://agentprime.io/advisories/CVE-2024-0408/https://agentprime.io/advisories/CVE-2024-0408/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 15:40:06 GMTCVECVE-2023-5719: Red Lion Crimson Improper Neutralization of Null Byte or NUL Characterhttps://agentprime.io/advisories/CVE-2023-5719/https://agentprime.io/advisories/CVE-2023-5719/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 19:33:20 GMTCVECVE-2022-31223: Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability.https://agentprime.io/advisories/CVE-2022-31223/https://agentprime.io/advisories/CVE-2022-31223/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Sep 2022 18:35:20 GMTCVECVE-2022-20813: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilitieshttps://agentprime.io/advisories/CVE-2022-20813/https://agentprime.io/advisories/CVE-2022-20813/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Jul 2022 20:30:45 GMTCVEcriticalCVE-2022-20812: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilitieshttps://agentprime.io/advisories/CVE-2022-20812/https://agentprime.io/advisories/CVE-2022-20812/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Jul 2022 20:30:40 GMTCVEcriticalCVE-2020-7928: Improper neutralization of null byte leads to read overrunhttps://agentprime.io/advisories/CVE-2020-7928/https://agentprime.io/advisories/CVE-2020-7928/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Nov 2020 16:35:12 GMTCVECVE-2020-14500: IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158https://agentprime.io/advisories/CVE-2020-14500/https://agentprime.io/advisories/CVE-2020-14500/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2020 13:12:30 GMTCVEcriticalCVE-2020-5363: Dell Client Consumer and Commercial platforms: Select Dell Client Consumer and Commercial platforms include an issue that allows the…https://agentprime.io/advisories/CVE-2020-5363/https://agentprime.io/advisories/CVE-2020-5363/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2020 20:40:13 GMTCVECVE-2009-1537: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 S…https://agentprime.io/advisories/CVE-2009-1537/https://agentprime.io/advisories/CVE-2009-1537/CVSS 8.8 (High). Critical: In CISA’s KEV catalogue since 20 May 2026: it is known to be exploited. CVSS score 8.8 (7.0 or more) and EPSS 0.51 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2009 18:00:00 GMTCVEcriticalKEV