<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-233</title><description>Every new CWE-233 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-55835: Lookyloo: Potential sub-system DoS due to parameter missmatch in notification</title><link>https://agentprime.io/advisories/CVE-2026-55835/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55835/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 04:14:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-0515: Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety</title><link>https://agentprime.io/advisories/CVE-2026-0515/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0515/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 17:13:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-32998: This vulnerability in Veeam Service Provider Console allows for remote code execution.</title><link>https://agentprime.io/advisories/CVE-2026-32998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32998/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 04:01:38 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-33585: Arqit SKA-Platform Improper Handling of Parameters Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-33585/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33585/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 May 2026 18:46:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-25233: WebDrive 18.00.5057 Denial of Service via Secure WebDAV</title><link>https://agentprime.io/advisories/CVE-2018-25233/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-25233/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 11:02:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2370: Improper Handling of Parameters in GitLab</title><link>https://agentprime.io/advisories/CVE-2026-2370/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2370/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 29 Mar 2026 23:33:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20514: Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in ar…</title><link>https://agentprime.io/advisories/CVE-2023-20514/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20514/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Feb 2026 14:33:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-22626: Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.</title><link>https://agentprime.io/advisories/CVE-2026-22626/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22626/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jan 2026 11:03:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55080: Improper Parameter Check in ThreadX Syscall Implementation</title><link>https://agentprime.io/advisories/CVE-2025-55080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55080/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Oct 2025 05:41:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55078: Incomplete validation of kernel object pointers in system calls</title><link>https://agentprime.io/advisories/CVE-2025-55078/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55078/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 07:28:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52970: Fortinet FortiWeb: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below…</title><link>https://agentprime.io/advisories/CVE-2025-52970/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52970/</guid><description>CVSS 7.7 (High). Critical: CVSS score 7.7 (7.0 or more) and EPSS 0.10 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Aug 2025 18:59:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Debezium database connector has a script injection vulnerability</title><link>https://agentprime.io/advisories/GHSA-hvw5-3mgw-7rcf/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hvw5-3mgw-7rcf/</guid><description>io.debezium:debezium-connector-mysql &lt;2.3.0.Alpha1, fixed in 2.3.0.Alpha1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Sun, 17 Nov 2024 12:30:29 GMT</pubDate><category>Maven</category><category>io.debezium:debezium-connector-mysql</category><category>io.debezium:debezium-connector-sqlserver</category><category>io.debezium:debezium-core</category></item><item><title>Eclipse Glassfish improperly handles http parameters</title><link>https://agentprime.io/advisories/GHSA-jq3f-mfmg-747x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jq3f-mfmg-747x/</guid><description>org.glassfish.main.admin:rest-service &lt;7.0.17, fixed in 7.0.17. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Sep 2024 09:30:47 GMT</pubDate><category>Maven</category><category>org.glassfish.main.admin:rest-service</category></item><item><title>CVE-2023-40819: ID4Portais in version &lt; V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.</title><link>https://agentprime.io/advisories/CVE-2023-40819/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40819/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Aug 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-7261: Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file.</title><link>https://agentprime.io/advisories/CVE-2023-7261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7261/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jun 2024 20:09:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-33433: Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.</title><link>https://agentprime.io/advisories/CVE-2024-33433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-33433/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 May 2024 19:56:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31808: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.</title><link>https://agentprime.io/advisories/CVE-2024-31808/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31808/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-20306: Cisco IOS XE Software: A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE…</title><link>https://agentprime.io/advisories/CVE-2024-20306/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20306/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 16:58:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-24525: An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL.</title><link>https://agentprime.io/advisories/CVE-2024-24525/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-24525/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Feb 2024 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Improper Handling of Parameters in moodle</title><link>https://agentprime.io/advisories/GHSA-6vjf-48fh-vxxj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6vjf-48fh-vxxj/</guid><description>moodle/moodle &lt;4.1.9 || &gt;=4.2.0, &lt;4.2.6 || &gt;=4.3.0, &lt;4.3.3, fixed in 4.1.9, 4.2.6, 4.3.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Feb 2024 18:31:32 GMT</pubDate><category>Packagist</category><category>moodle/moodle</category></item><item><title>CVE-2023-28898: Head Unit Denial-of-Service via Apple CarPlay service</title><link>https://agentprime.io/advisories/CVE-2023-28898/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28898/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jan 2024 16:04:57 GMT</pubDate><category>CVE</category></item><item><title>Resque vulnerable to Reflected Cross Site Scripting through pathnames</title><link>https://agentprime.io/advisories/GHSA-r8xx-8vm8-x6wj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r8xx-8vm8-x6wj/</guid><description>resque &lt;2.1.0, fixed in 2.1.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Dec 2023 19:34:14 GMT</pubDate><category>RubyGems</category><category>resque</category></item><item><title>Resque vulnerable to reflected XSS in resque-web failed and queues lists</title><link>https://agentprime.io/advisories/GHSA-gc3j-vvwf-4rp8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gc3j-vvwf-4rp8/</guid><description>resque &lt;2.2.1, fixed in 2.2.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Dec 2023 19:34:06 GMT</pubDate><category>RubyGems</category><category>resque</category></item><item><title>Resque vulnerable to reflected XSS in Queue Endpoint</title><link>https://agentprime.io/advisories/GHSA-r9mq-m72x-257g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r9mq-m72x-257g/</guid><description>resque &lt;2.6.0, fixed in 2.6.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Dec 2023 19:33:58 GMT</pubDate><category>RubyGems</category><category>resque</category></item><item><title>CVE-2023-26549: The SystemUI module has a vulnerability of repeated app restart due to improper parameters.</title><link>https://agentprime.io/advisories/CVE-2023-26549/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26549/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-45478: IDOR in Yordam Library Automation System</title><link>https://agentprime.io/advisories/CVE-2021-45478/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-45478/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Mar 2023 08:26:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-45477: IDOR in Yordam Library Automation System</title><link>https://agentprime.io/advisories/CVE-2021-45477/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-45477/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Mar 2023 08:24:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20076: Cisco IOx Application Hosting Environment Command Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-20076/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20076/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Feb 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45182: Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.</title><link>https://agentprime.io/advisories/CVE-2022-45182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45182/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Ansible leaks password to logs</title><link>https://agentprime.io/advisories/GHSA-cpx3-93w7-457x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cpx3-93w7-457x/</guid><description>ansible &gt;=2.5.0, &lt;7.0.0, fixed in 7.0.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Oct 2022 19:00:38 GMT</pubDate><category>PyPI</category><category>ansible</category></item><item><title>CVE-2022-32261: A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.1).</title><link>https://agentprime.io/advisories/CVE-2022-32261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-32261/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jun 2022 09:22:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22792: MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters</title><link>https://agentprime.io/advisories/CVE-2022-22792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22792/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Feb 2022 16:38:07 GMT</pubDate><category>CVE</category></item><item><title>Pillow denial of service</title><link>https://agentprime.io/advisories/GHSA-g6rj-rv7j-xwp4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g6rj-rv7j-xwp4/</guid><description>pillow &lt;8.2.0, fixed in 8.2.0. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Jun 2021 18:49:11 GMT</pubDate><category>PyPI</category><category>pillow</category></item><item><title>CVE-2020-10069: Zephyr Bluetooth unchecked packet data results in denial of service</title><link>https://agentprime.io/advisories/CVE-2020-10069/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-10069/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 May 2021 21:40:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-0269: Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.</title><link>https://agentprime.io/advisories/CVE-2021-0269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-0269/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Apr 2021 19:37:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-1230: Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-1230/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-1230/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Feb 2021 19:30:30 GMT</pubDate><category>CVE</category></item></channel></rss>