<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-274</title><description>Every new CWE-274 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-62764: Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions</title><link>https://agentprime.io/advisories/CVE-2026-62764/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62764/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 08:35:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54511: Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat…</title><link>https://agentprime.io/advisories/CVE-2025-54511/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54511/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 02:45:21 GMT</pubDate><category>CVE</category></item><item><title>Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability</title><link>https://agentprime.io/advisories/GHSA-78cg-fc6c-w44w/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-78cg-fc6c-w44w/</guid><description>org.apache.openmeetings:openmeetings-parent &gt;=3.10, &lt;9.0.0, fixed in 9.0.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Apr 2026 18:31:26 GMT</pubDate><category>Maven</category><category>org.apache.openmeetings:openmeetings-parent</category></item><item><title>CVE-2025-62175: Mastodon streaming API fails to disconnect disabled and suspended users</title><link>https://agentprime.io/advisories/CVE-2025-62175/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62175/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Oct 2025 20:59:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20516: Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiality or integrity.</title><link>https://agentprime.io/advisories/CVE-2023-20516/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20516/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Sep 2025 16:13:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-29365: spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.</title><link>https://agentprime.io/advisories/CVE-2025-29365/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-29365/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Aug 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-31275: A permissions issue was addressed with additional restrictions.</title><link>https://agentprime.io/advisories/CVE-2025-31275/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-31275/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Jul 2025 23:29:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20177: Cisco IOS XR Software Image Verification Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-20177/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20177/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Mar 2025 16:13:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-46974: GPU DDK - Arbitrary write of read-only dmabuf</title><link>https://agentprime.io/advisories/CVE-2024-46974/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-46974/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Jan 2025 03:07:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20156: Cisco Meeting Management Client-Server Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-20156/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20156/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Jan 2025 16:21:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-12666: ClassCMS User Management Page admin insufficient privileges</title><link>https://agentprime.io/advisories/CVE-2024-12666/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12666/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Dec 2024 20:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0106: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.</title><link>https://agentprime.io/advisories/CVE-2024-0106/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0106/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Nov 2024 05:53:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0105: NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.</title><link>https://agentprime.io/advisories/CVE-2024-0105/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0105/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Nov 2024 05:36:06 GMT</pubDate><category>CVE</category></item><item><title>Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent</title><link>https://agentprime.io/advisories/GHSA-j8x2-2m5w-j939/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j8x2-2m5w-j939/</guid><description>github.com/aws/amazon-cloudwatch-agent &lt;1.247355.0, fixed in 1.247355.0. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 16:03:59 GMT</pubDate><category>Go</category><category>github.com/aws/amazon-cloudwatch-agent</category></item><item><title>JupyterHub has a privilege escalation vulnerability with the `admin:users` scope</title><link>https://agentprime.io/advisories/GHSA-9x4q-3gxw-849f/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9x4q-3gxw-849f/</guid><description>jupyterhub &lt;4.1.6 || &gt;=5.0.0, &lt;5.1.0, fixed in 4.1.6, 5.1.0. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Aug 2024 14:37:06 GMT</pubDate><category>PyPI</category><category>jupyterhub</category></item><item><title>CVE-2024-20324: Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…</title><link>https://agentprime.io/advisories/CVE-2024-20324/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20324/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 16:55:53 GMT</pubDate><category>CVE</category></item><item><title>XWiki has no right protection on rollback action</title><link>https://agentprime.io/advisories/GHSA-xh35-w7wg-95v3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xh35-w7wg-95v3/</guid><description>org.xwiki.platform:xwiki-platform &gt;=15.0-rc-1, &lt;15.5.3 || &gt;=15.6-rc-1, &lt;15.8-rc-1, fixed in 15.5.3, 15.8-rc-1. CVSS 8.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jan 2024 16:25:58 GMT</pubDate><category>Maven</category><category>org.xwiki.platform:xwiki-platform</category><category>org.xwiki.platform:xwiki-platform-oldcore</category></item><item><title>CVE-2023-39375: SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges</title><link>https://agentprime.io/advisories/CVE-2023-39375/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39375/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2023 09:15:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32494: Dell PowerScale OneFS: Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient…</title><link>https://agentprime.io/advisories/CVE-2023-32494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32494/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Aug 2023 12:56:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35928: Nextcloud user scoped external storage can be used to gather credentials of other users</title><link>https://agentprime.io/advisories/CVE-2023-35928/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35928/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jun 2023 20:58:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45101: Dell PowerScale OneFS: Dell PowerScale OneFS 9.0.0.x - 9.4.0.x…</title><link>https://agentprime.io/advisories/CVE-2022-45101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45101/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Feb 2023 04:41:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0668: JFrog Artifactory: JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass…</title><link>https://agentprime.io/advisories/CVE-2022-0668/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0668/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 08 Jan 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-25782: Insufficient privilege checks on object access and updates.</title><link>https://agentprime.io/advisories/CVE-2022-25782/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-25782/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 May 2022 13:54:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23160: Dell PowerScale OneFS: Dell PowerScale OneFS, versions 8.2.0-9.3.0…</title><link>https://agentprime.io/advisories/CVE-2022-23160/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23160/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Apr 2022 17:50:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32006: GateManager information leak for LinkManager Users</title><link>https://agentprime.io/advisories/CVE-2021-32006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32006/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Mar 2022 15:08:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-35534: Insufficient Security Control Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-35534/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35534/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Nov 2021 16:35:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-24676: Insecure Windows Services in Symphony Plus</title><link>https://agentprime.io/advisories/CVE-2020-24676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-24676/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Dec 2020 21:15:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7283: Privilege Escalation vulnerability in McAfee Total Protection (MTP)</title><link>https://agentprime.io/advisories/CVE-2020-7283/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7283/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Jul 2020 13:30:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7290: Privilege Escalation vulnerability in MAR for Linux</title><link>https://agentprime.io/advisories/CVE-2020-7290/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7290/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:45:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7291: Privilege Escalation vulnerability MAR for Mac</title><link>https://agentprime.io/advisories/CVE-2020-7291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7291/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:45:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7287: Privilege Escalation vulnerability in EDR for Linux</title><link>https://agentprime.io/advisories/CVE-2020-7287/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7287/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:40:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7288: Privilege Escalation vulnerability in EDR for Mac</title><link>https://agentprime.io/advisories/CVE-2020-7288/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7288/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:40:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7289: Privilege Escalation vulnerability in MAR for Windows</title><link>https://agentprime.io/advisories/CVE-2020-7289/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7289/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:40:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7285: Privilege Escalation vulnerability in MVISION Endpoint</title><link>https://agentprime.io/advisories/CVE-2020-7285/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7285/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:35:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7286: Privilege Escalation vulnerability in EDR for Windows</title><link>https://agentprime.io/advisories/CVE-2020-7286/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7286/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:35:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7267: Privilege Escalation vulnerability through symbolic links in VSEL</title><link>https://agentprime.io/advisories/CVE-2020-7267/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7267/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 12:25:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7266: Privilege Escalation vulnerability through symbolic links in VSE for Windows</title><link>https://agentprime.io/advisories/CVE-2020-7266/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7266/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 11:55:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7265: Privilege Escalation vulnerability through symbolic links in ENSM</title><link>https://agentprime.io/advisories/CVE-2020-7265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7265/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 11:50:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7264: Privilege Escalation vulnerability through symbolic links in ENS for Windows</title><link>https://agentprime.io/advisories/CVE-2020-7264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7264/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2020 11:45:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-6693: Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability</title><link>https://agentprime.io/advisories/CVE-2018-6693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-6693/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Sep 2018 22:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-3912: McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass</title><link>https://agentprime.io/advisories/CVE-2017-3912/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-3912/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Sep 2018 22:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-6674: Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges</title><link>https://agentprime.io/advisories/CVE-2018-6674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-6674/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 May 2018 13:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>