agentprime: CWE-202

CVE-2026-118544: Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259

Fri, 30 Oct 2026 03:09:08 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110183: PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

Wed, 28 Oct 2026 17:31:53 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105615: PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

Wed, 28 Oct 2026 17:31:46 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100420: Information disclosure vulnerability in the cloud-client daemon of Deco BE63

Wed, 21 Oct 2026 23:04:28 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content

Mon, 19 Oct 2026 09:35:05 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata

Mon, 19 Oct 2026 09:34:11 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

Mon, 19 Oct 2026 09:33:52 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Backstage has improper input validation in scaffolder task list ordering

Wed, 07 Oct 2026 16:24:12 GMT

@backstage/plugin-scaffolder-backend <4.1.0, fixed in 4.1.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-103440: pagetriagelist discloses suppressed reviewer usernames

Wed, 30 Sep 2026 17:38:27 GMT

CVSS 1.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40533: Synology DiskStation Manager (DSM): An exposure of sensitive information through data queries vulnerability in Desktop API in…

Fri, 18 Sep 2026 08:28:35 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist

Mon, 14 Sep 2026 12:30:53 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16520: Improper input validation in Genians Genian NAC V4.0 and others

Thu, 20 Aug 2026 23:57:34 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25703: Potential information leakage from manager /network/graph API in NeuVector

Wed, 05 Aug 2026 09:48:19 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Tue, 04 Aug 2026 17:57:27 GMT

flowise <3.1.3, fixed in 3.1.3. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Syncope Vulnerable to Exposure of Sensitive Information Through Data Queries

Tue, 26 May 2026 13:30:46 GMT

org.apache.syncope.core:syncope-core-provisioning-api >=3.0.0-M0, <=3.0.16 || >=4.0.0-M0, <4.0.6 || >=4.1.0-M0, <4.1.1, fixed in 4.0.6, 4.1.1. CVSS 4.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information

Thu, 16 Apr 2026 15:31:31 GMT

org.apache.skywalking:server-core >=9.7.0, <10.4.0, fixed in 10.4.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

free5gc UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication

Tue, 14 Apr 2026 20:00:15 GMT

github.com/free5gc/udr <=1.4.2, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-33530: InvenTree Vulnerable to ORM Filter Injection

Thu, 26 Mar 2026 19:34:51 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3546: e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via API Token via 'eshot_form_builder_get_account_data' AJAX Action

Sat, 21 Mar 2026 03:26:56 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy

Fri, 30 Jan 2026 19:35:40 GMT

@vendure/core <3.5.3, fixed in 3.5.3. CVSS 2.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components

Mon, 05 Jan 2026 23:09:51 GMT

aiohttp <3.13.3, fixed in 3.13.3. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Unauthenticated Craft CMS users can trigger a database backup

Mon, 05 Jan 2026 18:49:56 GMT

craftcms/cms >=3.0.0, <4.16.17 || >=5.0.0-RC1, <5.8.21, fixed in 4.16.17, 5.8.21. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-64528: Users are able to find users by name even when `enable_names` is off

Tue, 30 Dec 2025 16:04:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

phpMyFAQ has unauthenticated config backup download via /api/setup/backup

Tue, 30 Dec 2025 15:31:19 GMT

thorsten/phpmyfaq <4.0.16 || >=4.1.0-alpha, <=4.1.0-beta.2, fixed in 4.0.16. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-64504: Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs

Mon, 10 Nov 2025 21:51:36 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly

Wed, 24 Sep 2025 19:21:37 GMT

d7y.io/dragonfly/v2 <2.1.0, fixed in 2.1.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Possible ORM Leak Vulnerability in the Harbor

Wed, 23 Jul 2025 15:47:31 GMT

github.com/goharbor/harbor <2.4.0-rc1.0.20250331071157-dce7d9f5cffb || >=2.4.0-rc1.1, <2.12.4 || >=2.13.0, <2.13.1, fixed in 2.4.0-rc1.0.20250331071157-dce7d9f5cffb, 2.12.4, 2.13.1. CVSS 4.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-36575: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to WMS 5.2…

Tue, 10 Jun 2025 17:19:35 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-29981: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to WMS 5.1…

Wed, 02 Apr 2025 00:01:31 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-25205: Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Wed, 12 Feb 2025 18:16:01 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-13255: RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019

Thu, 09 Jan 2025 19:00:43 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-20388: Cisco Firepower Management Center: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC)…

Wed, 23 Oct 2024 17:35:24 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-6400: Cleartext Storage of Username and Password in Finrota's Netahsilat

Fri, 04 Oct 2024 11:12:30 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-1287: Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

Tue, 30 Jul 2024 06:00:06 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38897: WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.

Mon, 24 Jun 2024 00:00:00 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38895: WAVLINK WN551K1'live_mfg.shtml enables attackers to obtain sensitive router information.

Mon, 24 Jun 2024 00:00:00 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38892: An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component.

Mon, 24 Jun 2024 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2088: NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure

Wed, 22 May 2024 06:50:34 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-7072: Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint

Tue, 12 Mar 2024 22:32:27 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenStack Heat information leak vulnerability

Sun, 24 Sep 2023 03:30:20 GMT

openstack-heat <20.0.0, fixed in 20.0.0. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-20215: Cisco Secure Web Appliance: A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web…

Thu, 03 Aug 2023 21:16:38 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-0785: SourceCodester Best Online News Portal check_availability.php information exposure

Sun, 12 Feb 2023 07:37:15 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-41623: WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Fri, 14 Oct 2022 19:37:09 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-20810: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability

Fri, 30 Sep 2022 18:45:31 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-4159: kernel: A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data…

Wed, 24 Aug 2022 15:10:57 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-20747: Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Fri, 15 Apr 2022 14:20:25 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-34782: Cisco DNA Center Information Disclosure Vulnerability

Wed, 06 Oct 2021 19:45:11 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-32743: Passwords used to access external services inadvertently exposed through API

Thu, 15 Jul 2021 16:05:12 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-1372: Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability

Wed, 17 Feb 2021 16:55:28 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-19000: eSOMS Cachecontrol (Pragma) HTTP Header

Thu, 02 Apr 2020 19:49:35 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.