agentprime: CWE-273

CVE-2026-86385: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8…

Wed, 28 Oct 2026 09:47:44 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101306: Multiple jail filesystem root escapes

Thu, 15 Oct 2026 06:46:25 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101305: Multiple jail filesystem root escapes

Thu, 15 Oct 2026 06:46:16 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101304: Multiple jail filesystem root escapes

Thu, 15 Oct 2026 06:46:03 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Thu, 08 Oct 2026 21:58:11 GMT

praisonai <4.6.78, fixed in 4.6.78. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Hugging Face Transformers downloads custom generation code before trust consent

Tue, 01 Sep 2026 15:31:13 GMT

transformers >=4.49.0, <=5.8.1, no fixed version yet. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-58089: hwpmc fails to detach PMCs during exec credential transitions

Wed, 26 Aug 2026 04:30:06 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-61897: accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts

Thu, 20 Aug 2026 14:32:53 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58086: ktrace(2) privilege incorrectly validated in jails

Wed, 19 Aug 2026 07:42:10 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49421: unlinkat(2) ignores AT_RESOLVE_BENEATH flag

Wed, 19 Aug 2026 05:25:43 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

sh _uid does not drop supplementary groups (incomplete privilege drop)

Fri, 17 Jul 2026 18:41:38 GMT

sh <2.2.4, fixed in 2.2.4. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Wed, 15 Jul 2026 12:32:03 GMT

praisonai <=4.6.77, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

id: groups= computed from real GID instead of effective GID

Mon, 06 Jul 2026 20:16:46 GMT

uu_id <0.6.0, fixed in 0.6.0. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44073: seteuid failure ignored in auth modules

Thu, 21 May 2026 07:35:06 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32107: xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

Fri, 17 Apr 2026 19:25:20 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

Mon, 02 Mar 2026 17:44:53 GMT

theshit <0.2.0, fixed in 0.2.0. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-62175: Mastodon streaming API fails to disconnect disabled and suspended users

Mon, 13 Oct 2025 20:59:31 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27396: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).

Tue, 11 Mar 2025 09:48:27 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-1003: HP Anyware Agent for Linux – Potential Authentication Bypass

Mon, 03 Feb 2025 23:56:35 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38813: Privilege escalation vulnerability

Tue, 17 Sep 2024 17:13:13 GMT

CVSS 7.5 (High). Critical: In CISA’s KEV catalogue since 20 Nov 2024: it is known to be exploited. CVSS score 7.5 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8382: Mozilla Firefox: Internal browser event interfaces were exposed to web content when privileged…

Tue, 03 Sep 2024 12:32:18 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak vulnerable to impersonation via logout token exchange

Wed, 17 Apr 2024 18:25:59 GMT

org.keycloak:keycloak-services <22.0.10 || >=23.0.0, <24.0.3, fixed in 22.0.10, 24.0.3. CVSS 3.4 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Mattermost Server Improper Access Control

Fri, 05 Apr 2024 09:30:38 GMT

github.com/mattermost/mattermost/server/v8 <8.1.11, fixed in 8.1.11. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Ignite Realtime Openfire privilege escalation vulnerability

Tue, 26 Mar 2024 21:30:47 GMT

org.igniterealtime.openfire:xmppserver <4.8.1, fixed in 4.8.1. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-47129: netfilter: nft_ct: skip expectations for confirmed conntrack

Fri, 15 Mar 2024 20:14:33 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-52433: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

Tue, 20 Feb 2024 12:52:56 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests

Fri, 05 Jan 2024 16:18:01 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-5369: copy_file_range insufficient capability rights check

Wed, 04 Oct 2023 03:48:53 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-35692: In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation.

Fri, 14 Jul 2023 15:57:35 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-21246: In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception.

Wed, 12 Jul 2023 23:29:44 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-34844: Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.

Thu, 29 Jun 2023 00:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-0358: A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation.

Mon, 29 Aug 2022 00:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

Apache Superset allows authenticated users to access metadata they have no permission to

Thu, 07 Jul 2022 00:00:26 GMT

apache-superset <1.5.1, fixed in 1.5.1. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Moodle does not revoke role capabilities correctly

Tue, 24 May 2022 17:05:43 GMT

moodle/moodle >=3.5.0, <3.5.9 || >=3.6.0, <3.6.7 || >=3.7.0, <3.7.3, fixed in 3.5.9, 3.6.7, 3.7.3. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-3982: gnome-shell: Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege…

Fri, 29 Apr 2022 00:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

Improper Privilege Management in Apache Ozone

Tue, 23 Nov 2021 17:57:14 GMT

org.apache.ozone:ozone-main <1.2.0, fixed in 1.2.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-18276: An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.

Thu, 28 Nov 2019 00:27:51 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.