agentprime: CWE-193

CVE-2026-116781: FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing

Thu, 05 Nov 2026 19:28:09 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116574: FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences

Thu, 05 Nov 2026 19:00:26 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120061: psqlODBC ODBC escape parser stack buffer overflow

Mon, 02 Nov 2026 19:09:11 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

Wed, 28 Oct 2026 21:15:08 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Tue, 27 Oct 2026 15:33:42 GMT

org.xerial.snappy:snappy-java <1.1.10.9, fixed in 1.1.10.9. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-116735: libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries

Mon, 26 Oct 2026 21:52:35 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114460: Mod_qos: query truncation during json body merging permits security-rule bypass

Thu, 22 Oct 2026 06:37:07 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12727: IBM MQ Buffer Overflow

Mon, 19 Oct 2026 16:39:55 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111273: unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name

Thu, 15 Oct 2026 21:43:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108443: Microsoft Office Word Remote Code Execution Vulnerability

Thu, 15 Oct 2026 20:57:25 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101302: Remote DoS via receive-side kernel TLS

Thu, 15 Oct 2026 06:53:12 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110604: Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()

Wed, 14 Oct 2026 14:16:44 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97741: Microsoft Office Excel Remote Code Execution Vulnerability

Tue, 13 Oct 2026 19:01:28 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102857: Microsoft Office Visio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 18:59:28 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

Thu, 08 Oct 2026 17:45:53 GMT

github.com/corazawaf/coraza/v3 >=3.0.0, <3.8.0, fixed in 3.8.0. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-83742: wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Wed, 07 Oct 2026 02:41:48 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42618: In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a m…

Wed, 07 Oct 2026 00:00:00 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106584: Off-by-one error in OpenBSD OpenSSH

Tue, 06 Oct 2026 20:47:50 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104033: Sssd: sssd: access control bypass via improper ldap shadow expiration check

Tue, 06 Oct 2026 00:12:16 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102720: DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer

Tue, 29 Sep 2026 17:46:23 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101014: Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one

Mon, 28 Sep 2026 08:15:13 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100889: Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one

Sun, 27 Sep 2026 23:45:16 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18460: Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

Tue, 22 Sep 2026 17:50:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83600: Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent

Tue, 22 Sep 2026 17:05:15 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

Fri, 18 Sep 2026 13:57:37 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

Mon, 14 Sep 2026 21:31:37 GMT

github.com/zitadel/zitadel <4.16.0, fixed in 4.16.0. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-90781: alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

Sun, 13 Sep 2026 12:22:01 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81396: Microsoft Excel Remote Code Execution Vulnerability

Tue, 08 Sep 2026 17:18:58 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69609: Win32k Information Disclosure Vulnerability

Tue, 08 Sep 2026 17:11:49 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86297: D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one

Mon, 07 Sep 2026 10:45:26 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81738: Stack-based buffer overflow in OpenVPN

Mon, 07 Sep 2026 07:32:20 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57160: PJSIP: SIP message header buffer overflow

Fri, 04 Sep 2026 17:11:29 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85454: MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling

Thu, 03 Sep 2026 22:38:41 GMT

CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14368: Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parser

Mon, 31 Aug 2026 18:45:07 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Tue, 25 Aug 2026 21:53:05 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79148: Off-by-one error in Google Chrome

Tue, 25 Aug 2026 20:10:56 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68767: hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()

Sat, 22 Aug 2026 14:12:43 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63387: Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

Thu, 20 Aug 2026 17:53:41 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55564: FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments

Wed, 19 Aug 2026 17:45:47 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

nimiq-blockchain: Validity store off by one error

Wed, 12 Aug 2026 15:16:53 GMT

nimiq-blockchain <1.5.1, fixed in 1.5.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-66806: Microsoft Office Word Information Disclosure Vulnerability

Tue, 11 Aug 2026 17:07:02 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71391: Off-by-One Error in GNU Emacs for Android

Mon, 10 Aug 2026 10:22:17 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11771: Off-by-one error in OpenVPN

Thu, 30 Jul 2026 16:36:41 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

ImageMagick: Information Disclosure when printing profiles with debug enabled

Fri, 24 Jul 2026 14:29:42 GMT

Magick.NET-Q16-AnyCPU <14.15.0, fixed in 14.15.0. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for forwarding

Wed, 22 Jul 2026 19:19:42 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44687: Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

Wed, 22 Jul 2026 13:06:42 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50497: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Tue, 14 Jul 2026 17:07:59 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58380: Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

Mon, 06 Jul 2026 13:58:43 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12413: IKEv2 Denial of Service via malformed fragmentation

Thu, 02 Jul 2026 21:19:22 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7831: UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

Wed, 01 Jul 2026 03:33:25 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.