agentprime: CWE-195Every new CWE-195 Advisory and CVE.https://agentprime.io/ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attributehttps://agentprime.io/advisories/GHSA-m4pr-6v3c-6fgr/https://agentprime.io/advisories/GHSA-m4pr-6v3c-6fgr/onnx >=1.4.0, <1.22.0, fixed in 1.22.0. CVSS 6.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 28 Oct 2026 21:16:30 GMTPyPIonnxCVE-2026-115679: Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Bufferhttps://agentprime.io/advisories/CVE-2026-115679/https://agentprime.io/advisories/CVE-2026-115679/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 15:46:01 GMTCVECVE-2026-115678: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in…https://agentprime.io/advisories/CVE-2026-115678/https://agentprime.io/advisories/CVE-2026-115678/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 15:38:06 GMTCVECVE-2026-82943: Out-of-Bounds Read via Unchecked Length Valueshttps://agentprime.io/advisories/CVE-2026-82943/https://agentprime.io/advisories/CVE-2026-82943/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:41:26 GMTCVECVE-2026-70388: Memory Corruption via Integer Underflow in Message Length Validationhttps://agentprime.io/advisories/CVE-2026-70388/https://agentprime.io/advisories/CVE-2026-70388/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:34:24 GMTCVECVE-2026-101937: Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is usedhttps://agentprime.io/advisories/CVE-2026-101937/https://agentprime.io/advisories/CVE-2026-101937/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:40:47 GMTCVECVE-2026-110735: godotengine Godot Engine: Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader…https://agentprime.io/advisories/CVE-2026-110735/https://agentprime.io/advisories/CVE-2026-110735/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:41:50 GMTCVECVE-2026-17507: MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderhttps://agentprime.io/advisories/CVE-2026-17507/https://agentprime.io/advisories/CVE-2026-17507/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:26:34 GMTCVECVE-2026-74221: U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINKhttps://agentprime.io/advisories/CVE-2026-74221/https://agentprime.io/advisories/CVE-2026-74221/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 21:29:23 GMTCVECVE-2026-74220: U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Replyhttps://agentprime.io/advisories/CVE-2026-74220/https://agentprime.io/advisories/CVE-2026-74220/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 21:29:22 GMTCVECVE-2026-102639: MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserializationhttps://agentprime.io/advisories/CVE-2026-102639/https://agentprime.io/advisories/CVE-2026-102639/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:57:36 GMTCVERabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configurationhttps://agentprime.io/advisories/GHSA-rm6m-hrcw-jw33/https://agentprime.io/advisories/GHSA-rm6m-hrcw-jw33/github.com/rabbitmq/amqp091-go <1.13.0, fixed in 1.13.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 17 Sep 2026 17:04:05 GMTGogithub.com/rabbitmq/amqp091-goCVE-2026-20248: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-20248/https://agentprime.io/advisories/CVE-2026-20248/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:17:47 GMTCVECVE-2026-85441: MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengthhttps://agentprime.io/advisories/CVE-2026-85441/https://agentprime.io/advisories/CVE-2026-85441/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 22:38:31 GMTCVECVE-2026-18444: Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEWhttps://agentprime.io/advisories/CVE-2026-18444/https://agentprime.io/advisories/CVE-2026-18444/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:09:03 GMTCVECVE-2026-62959: Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)https://agentprime.io/advisories/CVE-2026-62959/https://agentprime.io/advisories/CVE-2026-62959/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 19:57:06 GMTCVECVE-2026-55737: Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderhttps://agentprime.io/advisories/CVE-2026-55737/https://agentprime.io/advisories/CVE-2026-55737/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 15:13:54 GMTCVECVE-2026-55991: Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2https://agentprime.io/advisories/CVE-2026-55991/https://agentprime.io/advisories/CVE-2026-55991/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:10:13 GMTCVECVE-2026-49840: FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsinghttps://agentprime.io/advisories/CVE-2026-49840/https://agentprime.io/advisories/CVE-2026-49840/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:00:56 GMTCVEcriticalCVE-2026-41682: pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusionhttps://agentprime.io/advisories/CVE-2026-41682/https://agentprime.io/advisories/CVE-2026-41682/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 22:47:37 GMTCVEOpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpphttps://agentprime.io/advisories/GHSA-q6vj-wxvf-5m8c/https://agentprime.io/advisories/GHSA-q6vj-wxvf-5m8c/openexr >=3.3.0, <3.3.7 || >=3.4.0, <3.4.5, fixed in 3.3.7, 3.4.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 06 Apr 2026 17:51:37 GMTPyPIopenexrSequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too shorthttps://agentprime.io/advisories/GHSA-v6x3-9r38-r27q/https://agentprime.io/advisories/GHSA-v6x3-9r38-r27q/sequoia-openpgp <2.1.0, fixed in 2.1.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sun, 14 Dec 2025 06:30:24 GMTcrates.iosequoia-openpgpCVE-2025-65495: Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X509(…https://agentprime.io/advisories/CVE-2025-65495/https://agentprime.io/advisories/CVE-2025-65495/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Nov 2025 00:00:00 GMTCVECVE-2025-52566: llama.cpp tokenizer signed vs. unsigned heap overflowhttps://agentprime.io/advisories/CVE-2025-52566/https://agentprime.io/advisories/CVE-2025-52566/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 03:21:19 GMTCVECVE-2025-49847: llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Modelhttps://agentprime.io/advisories/CVE-2025-49847/https://agentprime.io/advisories/CVE-2025-49847/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 20:04:40 GMTCVECVE-2025-30646: Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crashhttps://agentprime.io/advisories/CVE-2025-30646/https://agentprime.io/advisories/CVE-2025-30646/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Apr 2025 19:53:27 GMTCVECVE-2025-24792: Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Errorhttps://agentprime.io/advisories/CVE-2025-24792/https://agentprime.io/advisories/CVE-2025-24792/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jan 2025 15:27:06 GMTCVECVE-2024-25388: drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.https://agentprime.io/advisories/CVE-2024-25388/https://agentprime.io/advisories/CVE-2024-25388/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Mar 2024 00:00:00 GMTCVECVE-2023-28063: Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability.https://agentprime.io/advisories/CVE-2023-28063/https://agentprime.io/advisories/CVE-2023-28063/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Feb 2024 07:38:54 GMTCVECVE-2023-33034: Signed-to-unsigned conversion error in Audiohttps://agentprime.io/advisories/CVE-2023-33034/https://agentprime.io/advisories/CVE-2023-33034/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 05:00:43 GMTCVECVE-2023-5184: Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driverhttps://agentprime.io/advisories/CVE-2023-5184/https://agentprime.io/advisories/CVE-2023-5184/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Sep 2023 17:26:51 GMTCVEOkio Signed to Unsigned Conversion Error vulnerabilityhttps://agentprime.io/advisories/GHSA-w33c-445m-f8w7/https://agentprime.io/advisories/GHSA-w33c-445m-f8w7/com.squareup.okio:okio >=2.0.0-RC1, <3.4.0 || <1.17.6, fixed in 3.4.0, 1.17.6. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 12 Jul 2023 21:30:50 GMTMavencom.squareup.okio:okiocom.squareup.okio:okio-jvmCVE-2022-43663: WellinTech KingHistorian: An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality…https://agentprime.io/advisories/CVE-2022-43663/https://agentprime.io/advisories/CVE-2022-43663/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Mar 2023 20:16:02 GMTCVEcriticalSigned to Unsigned Conversion Error in Facebook Hermeshttps://agentprime.io/advisories/GHSA-gmpm-xp43-f7g6/https://agentprime.io/advisories/GHSA-gmpm-xp43-f7g6/hermes-engine <0.5.2, fixed in 0.5.2. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 24 May 2022 17:27:39 GMTnpmhermes-engineCVE-2020-6096: GNU glibc: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy()…https://agentprime.io/advisories/CVE-2020-6096/https://agentprime.io/advisories/CVE-2020-6096/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2020 00:00:00 GMTCVECVE-2016-6560: illumos osnet-incorporation: illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of…https://agentprime.io/advisories/CVE-2016-6560/https://agentprime.io/advisories/CVE-2016-6560/Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Mar 2017 19:00:00 GMTCVECVE-2011-3045: Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a de…https://agentprime.io/advisories/CVE-2011-3045/https://agentprime.io/advisories/CVE-2011-3045/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Mar 2012 16:00:00 GMTCVE