agentprime: CWE-20

CVE-2026-71548: SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database

Thu, 05 Nov 2026 18:37:44 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116472: ingress-nginx mirror-target self-DOS

Thu, 05 Nov 2026 18:13:29 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123184: Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes

Thu, 05 Nov 2026 17:41:09 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102927: HedgeDoc: Missing validation of incoming permission values on change

Thu, 05 Nov 2026 17:29:59 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97174: Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens

Thu, 05 Nov 2026 17:15:54 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92857: Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens

Thu, 05 Nov 2026 17:15:24 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100228: Apache OFBiz: Improper Input Validation in Order Returns Enables Unauthorized Refund Price Manipulation

Thu, 05 Nov 2026 13:43:39 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62662: Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences

Wed, 04 Nov 2026 22:29:36 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121751: nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases

Wed, 04 Nov 2026 21:26:57 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122015: NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation

Wed, 04 Nov 2026 21:15:18 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11724: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Wed, 04 Nov 2026 20:25:58 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108500: Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection

Wed, 04 Nov 2026 10:37:55 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108946: Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection

Wed, 04 Nov 2026 10:14:06 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111821: Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal

Wed, 04 Nov 2026 10:10:31 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79405: Improper Input Validation in Modem Firmware

Wed, 04 Nov 2026 03:20:48 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116654: Tanium addressed an improper input validation vulnerability in Threat Response.

Tue, 03 Nov 2026 22:17:22 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116653: Tanium addressed an improper input validation vulnerability in Threat Response.

Tue, 03 Nov 2026 22:16:44 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121141: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:43:03 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121064: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:43:02 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121240: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:59 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121236: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:56 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121163: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:46 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121115: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:41 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121120: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:39 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121242: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:38 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121087: Improper input validation in Google Chrome

Tue, 03 Nov 2026 20:42:29 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63434: MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning

Tue, 03 Nov 2026 19:51:04 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Elo backends have code injection via unvalidated emission of programmatic AST fields

Tue, 03 Nov 2026 17:48:09 GMT

@enspirit/elo <1.0.1, fixed in 1.0.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-28336: SolarWinds Dameware Command Injection Vulnerability

Tue, 03 Nov 2026 16:23:19 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28335: SolarWinds Dameware Buffer Overflow Vulnerability

Tue, 03 Nov 2026 16:23:02 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121415: Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key

Tue, 03 Nov 2026 14:28:13 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121411: FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

Tue, 03 Nov 2026 14:28:10 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121407: FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

Tue, 03 Nov 2026 14:28:08 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119641: Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership

Tue, 03 Nov 2026 09:41:17 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116768: Missing length validation in Absolute Secure Access

Mon, 02 Nov 2026 20:27:51 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86365: Improper input validation in Dell Alienware Command Center (AWCC)

Mon, 02 Nov 2026 20:06:40 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59047: Improper input validation in Google Android

Mon, 02 Nov 2026 19:55:13 GMT