agentprime: CWE-214Every new CWE-214 Advisory and CVE.https://agentprime.io/CVE-2026-103682: Jolokia special agent exposes password in process listhttps://agentprime.io/advisories/CVE-2026-103682/https://agentprime.io/advisories/CVE-2026-103682/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 09:07:55 GMTCVECVE-2026-103674: NetApp ONTAP special agent exposes password in process listhttps://agentprime.io/advisories/CVE-2026-103674/https://agentprime.io/advisories/CVE-2026-103674/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 09:06:40 GMTCVECVE-2026-121745: nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command linehttps://agentprime.io/advisories/CVE-2026-121745/https://agentprime.io/advisories/CVE-2026-121745/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:28:03 GMTCVECVE-2026-116246: pgAdmin 4: Server passwords are left in pgAdmin's process environmenthttps://agentprime.io/advisories/CVE-2026-116246/https://agentprime.io/advisories/CVE-2026-116246/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:16 GMTCVECVE-2026-119117: Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Javahttps://agentprime.io/advisories/CVE-2026-119117/https://agentprime.io/advisories/CVE-2026-119117/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 18:05:08 GMTCVECVE-2026-92171: Infinispan-operator: infinispan operator: sensitive information disclosure due pod args storehttps://agentprime.io/advisories/CVE-2026-92171/https://agentprime.io/advisories/CVE-2026-92171/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:35:11 GMTCVECVE-2026-113496: Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line argumentshttps://agentprime.io/advisories/CVE-2026-113496/https://agentprime.io/advisories/CVE-2026-113496/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:09:12 GMTCVECVE-2026-113495: Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line argumentshttps://agentprime.io/advisories/CVE-2026-113495/https://agentprime.io/advisories/CVE-2026-113495/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:09:07 GMTCVECVE-2026-109971: Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolhttps://agentprime.io/advisories/CVE-2026-109971/https://agentprime.io/advisories/CVE-2026-109971/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:01:05 GMTCVECVE-2026-102371: wsl-pro-service: Ubuntu Pro token exposed via process command-line argumentshttps://agentprime.io/advisories/CVE-2026-102371/https://agentprime.io/advisories/CVE-2026-102371/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 14:11:19 GMTCVEmicrosandbox: Secret values exposed in world-readable process argumentshttps://agentprime.io/advisories/GHSA-m8f5-rh7h-vgg3/https://agentprime.io/advisories/GHSA-m8f5-rh7h-vgg3/microsandbox <0.5.10, fixed in 0.5.10. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 22 Sep 2026 19:43:04 GMTcrates.iomicrosandboxCVE-2026-92768: Cockpit-machines: cockpit-machines: sensitive data exposure via command-line argumentshttps://agentprime.io/advisories/CVE-2026-92768/https://agentprime.io/advisories/CVE-2026-92768/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:53:54 GMTCVECVE-2026-92747: Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process listhttps://agentprime.io/advisories/CVE-2026-92747/https://agentprime.io/advisories/CVE-2026-92747/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:53:35 GMTCVECVE-2026-92745: Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process argumentshttps://agentprime.io/advisories/CVE-2026-92745/https://agentprime.io/advisories/CVE-2026-92745/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:53:29 GMTCVEIn openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument ...https://agentprime.io/advisories/GHSA-rx2c-m92f-qv6p/https://agentprime.io/advisories/GHSA-rx2c-m92f-qv6p/openssl-encrypt <1.4.9, fixed in 1.4.9. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 27 Aug 2026 17:20:57 GMTPyPIopenssl-encryptCVE-2026-80158: Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingshttps://agentprime.io/advisories/CVE-2026-80158/https://agentprime.io/advisories/CVE-2026-80158/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 22:06:07 GMTCVECVE-2026-65088: NVIDIA NemoClaw: NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of…https://agentprime.io/advisories/CVE-2026-65088/https://agentprime.io/advisories/CVE-2026-65088/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 20:15:32 GMTCVECVE-2026-76054: Black Duck blackduck-c-cpp: Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp…https://agentprime.io/advisories/CVE-2026-76054/https://agentprime.io/advisories/CVE-2026-76054/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 14:16:36 GMTCVECVE-2026-18915: Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lockhttps://agentprime.io/advisories/CVE-2026-18915/https://agentprime.io/advisories/CVE-2026-18915/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:33:16 GMTCVEGitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)https://agentprime.io/advisories/GHSA-94p4-4cq8-9g67/https://agentprime.io/advisories/GHSA-94p4-4cq8-9g67/gitpython <3.1.55, fixed in 3.1.55. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 24 Jul 2026 21:45:16 GMTPyPIgitpythonCVE-2026-12139: Tanium addressed an information disclosure vulnerability in Connect.https://agentprime.io/advisories/CVE-2026-12139/https://agentprime.io/advisories/CVE-2026-12139/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 20:25:14 GMTCVECVE-2026-9494: ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Linehttps://agentprime.io/advisories/CVE-2026-9494/https://agentprime.io/advisories/CVE-2026-9494/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 12:12:27 GMTCVECVE-2026-12250: Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joinerhttps://agentprime.io/advisories/CVE-2026-12250/https://agentprime.io/advisories/CVE-2026-12250/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Jul 2026 14:27:28 GMTCVEPraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Executionhttps://agentprime.io/advisories/GHSA-pj2r-f9mw-vrcq/https://agentprime.io/advisories/GHSA-pj2r-f9mw-vrcq/praisonai <4.5.128, fixed in 4.5.128. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:28:15 GMTPyPIpraisonaiOpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processeshttps://agentprime.io/advisories/GHSA-j9pv-rrcj-6pfx/https://agentprime.io/advisories/GHSA-j9pv-rrcj-6pfx/openclaw <2026.3.31, fixed in 2026.3.31. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Apr 2026 21:01:57 GMTnpmopenclawopenssl-encrypt has visible password in process list via --password CLI argumenthttps://agentprime.io/advisories/GHSA-h3m5-p59h-x88p/https://agentprime.io/advisories/GHSA-h3m5-p59h-x88p/openssl-encrypt <1.4.0, fixed in 1.4.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 31 Mar 2026 23:42:17 GMTPyPIopenssl-encryptNATS credentials are exposed in monitoring port via command-line argvhttps://agentprime.io/advisories/GHSA-x6g4-f6q3-fqvv/https://agentprime.io/advisories/GHSA-x6g4-f6q3-fqvv/github.com/nats-io/nats-server/v2 <2.11.15 || >=2.12.0-RC.1, <2.12.6, fixed in 2.11.15, 2.12.6. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 24 Mar 2026 20:44:00 GMTGogithub.com/nats-io/nats-server/v2CVE-2025-59955: Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpointhttps://agentprime.io/advisories/CVE-2025-59955/https://agentprime.io/advisories/CVE-2025-59955/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 17:46:56 GMTCVECVE-2025-5452: A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP applicati…https://agentprime.io/advisories/CVE-2025-5452/https://agentprime.io/advisories/CVE-2025-5452/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Nov 2025 07:00:46 GMTCVECVE-2025-53860: F5OS-A FIPS HSM vulnerabilityhttps://agentprime.io/advisories/CVE-2025-53860/https://agentprime.io/advisories/CVE-2025-53860/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Oct 2025 15:15:23 GMTCVECVE-2025-48709: BMC Control-M/Server cleartext database credentials in process lists and logshttps://agentprime.io/advisories/CVE-2025-48709/https://agentprime.io/advisories/CVE-2025-48709/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Aug 2025 00:00:00 GMTCVECVE-2025-1333: IBM MQ Operator information disclosurehttps://agentprime.io/advisories/CVE-2025-1333/https://agentprime.io/advisories/CVE-2025-1333/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 May 2025 22:07:08 GMTCVECVE-2025-32987: Arctera eDiscovery Platform: Arctera eDiscovery Platform before 10.3.2…https://agentprime.io/advisories/CVE-2025-32987/https://agentprime.io/advisories/CVE-2025-32987/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 00:00:00 GMTCVECVE-2024-28799: IBM QRadar Suite Software information disclosurehttps://agentprime.io/advisories/CVE-2024-28799/https://agentprime.io/advisories/CVE-2024-28799/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 15:41:30 GMTCVECVE-2024-39314: toy-blog administrative token leaked through the command line parameterhttps://agentprime.io/advisories/CVE-2024-39314/https://agentprime.io/advisories/CVE-2024-39314/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jul 2024 21:33:54 GMTCVECVE-2024-4254: Secrets Exfiltration in gradio-app/gradiohttps://agentprime.io/advisories/CVE-2024-4254/https://agentprime.io/advisories/CVE-2024-4254/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Jun 2024 12:01:37 GMTCVECVE-2024-1742: Information disclosure in mk_oracle Checkmk agent pluginhttps://agentprime.io/advisories/CVE-2024-1742/https://agentprime.io/advisories/CVE-2024-1742/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 10:26:06 GMTCVECVE-2020-36771: Information disclosure in Cloudlinux OS cagefshttps://agentprime.io/advisories/CVE-2020-36771/https://agentprime.io/advisories/CVE-2020-36771/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Jan 2024 13:53:35 GMTCVEVeracode Scan Jenkins Plugin vulnerable to information disclosurehttps://agentprime.io/advisories/GHSA-fjrv-vx9m-4jpj/https://agentprime.io/advisories/GHSA-fjrv-vx9m-4jpj/com.veracode.jenkins:veracode-scan <23.3.19.0, fixed in 23.3.19.0. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 28 Mar 2023 21:30:20 GMTMavencom.veracode.jenkins:veracode-scanUndertow vulnerable to Denial of Service (DoS) attackshttps://agentprime.io/advisories/GHSA-339q-62wm-c39w/https://agentprime.io/advisories/GHSA-339q-62wm-c39w/io.undertow:undertow-core <2.2.15, fixed in 2.2.15. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 15 Jul 2022 21:32:13 GMTMavenio.undertow:undertow-coreCVE-2021-32638: CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecatedhttps://agentprime.io/advisories/CVE-2021-32638/https://agentprime.io/advisories/CVE-2021-32638/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 May 2021 17:10:11 GMTCVEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansiblehttps://agentprime.io/advisories/GHSA-86hp-cj9j-33vv/https://agentprime.io/advisories/GHSA-86hp-cj9j-33vv/ansible >=2.7.0a1, <2.7.18 || >=2.8.0a1, <2.8.12 || >=2.9.0a1, <2.9.7, fixed in 2.7.18, 2.8.12, 2.9.7. CVSS 5.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Apr 2021 20:33:26 GMTPyPIansibleCVE-2020-5422: UAA password may appear in BOSH System Metrics Server process argumentshttps://agentprime.io/advisories/CVE-2020-5422/https://agentprime.io/advisories/CVE-2020-5422/Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2020 17:10:12 GMTCVECVE-2019-3869: Red Hat Tower: When running Tower before 3.4.3 on OpenShift or Kubernetes…https://agentprime.io/advisories/CVE-2019-3869/https://agentprime.io/advisories/CVE-2019-3869/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2019 13:04:59 GMTCVECVE-2018-17957: yast2-rmt leaks database passwords in process listhttps://agentprime.io/advisories/CVE-2018-17957/https://agentprime.io/advisories/CVE-2018-17957/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Dec 2018 15:00:00 GMTCVEAnsible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-key...https://agentprime.io/advisories/GHSA-hwrm-63v2-42g4/https://agentprime.io/advisories/GHSA-hwrm-63v2-42g4/ansible <2.5.11 || >=2.6, <2.6.7 || >=2.7, <2.7.1, fixed in 2.5.11, 2.6.7, 2.7.1. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 23 Oct 2018 15:29:00 GMTPyPIansible