<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-219</title><description>Every new CWE-219 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Chamilo LMS CStudio upload flow allows unauthenticated remote code execution</title><link>https://agentprime.io/advisories/GHSA-g4c3-4g96-6g4m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g4c3-4g96-6g4m/</guid><description>chamilo/chamilo-lms &lt;2.0.1, fixed in 2.0.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 20:23:39 GMT</pubDate><category>Packagist</category><category>chamilo/chamilo-lms</category><category>critical</category></item><item><title>Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers</title><link>https://agentprime.io/advisories/GHSA-xvp7-8vm8-xfxx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xvp7-8vm8-xfxx/</guid><description>@actual-app/sync-server &lt;25.11.0, fixed in 25.11.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Oct 2025 17:55:59 GMT</pubDate><category>npm</category><category>@actual-app/sync-server</category></item><item><title>Astro&apos;s server source code is exposed to the public if sourcemaps are enabled</title><link>https://agentprime.io/advisories/GHSA-49w6-73cw-chjr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-49w6-73cw-chjr/</guid><description>astro &lt;4.16.18 || &gt;=5.0.0-alpha.0, &lt;5.0.8, fixed in 4.16.18, 5.0.8. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Dec 2024 15:12:33 GMT</pubDate><category>npm</category><category>astro</category></item><item><title>CVE-2024-39776: Avtec Outpost Storage of File with Sensitive Data Under Web Root</title><link>https://agentprime.io/advisories/CVE-2024-39776/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39776/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Aug 2024 19:49:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-39467: Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-39467/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39467/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 01:59:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-36306: Airspan AirVelocity: An authenticated attacker can enumerate and download sensitive files…</title><link>https://agentprime.io/advisories/CVE-2022-36306/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-36306/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Aug 2022 00:32:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-21236: An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102.</title><link>https://agentprime.io/advisories/CVE-2022-21236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-21236/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jan 2022 19:10:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2002-2024: Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap…</title><link>https://agentprime.io/advisories/CVE-2002-2024/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2002-2024/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Jul 2005 04:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>