agentprime: CWE-277Every new CWE-277 Advisory and CVE.https://agentprime.io/CVE-2025-11395: Podman: arbitrary file write when importing oci archivehttps://agentprime.io/advisories/CVE-2025-11395/https://agentprime.io/advisories/CVE-2025-11395/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 22:59:03 GMTCVECVE-2026-9046: Lenovo Legion Zone: A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo…https://agentprime.io/advisories/CVE-2026-9046/https://agentprime.io/advisories/CVE-2026-9046/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 16:48:47 GMTCVEview_component: Preview Route Can Dispatch Inherited Helper Methodshttps://agentprime.io/advisories/GHSA-7f3r-gwc9-2995/https://agentprime.io/advisories/GHSA-7f3r-gwc9-2995/view_component >=3.0.0, <4.9.0, fixed in 4.9.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 08 May 2026 23:33:14 GMTRubyGemsview_componentOpenClaw's ACP child sessions inherit subagent security envelope constraintshttps://agentprime.io/advisories/GHSA-q3jj-46pq-826r/https://agentprime.io/advisories/GHSA-q3jj-46pq-826r/openclaw <2026.4.22, fixed in 2026.4.22. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 04 May 2026 20:21:49 GMTnpmopenclawCVE-2026-30266: Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted filehttps://agentprime.io/advisories/CVE-2026-30266/https://agentprime.io/advisories/CVE-2026-30266/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 00:00:00 GMTCVECVE-2026-20630: A permissions issue was addressed with additional restrictions.https://agentprime.io/advisories/CVE-2026-20630/https://agentprime.io/advisories/CVE-2026-20630/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 22:58:05 GMTCVECVE-2025-32092: Intel(R) Graphics Software: Insecure inherited permissions for some Intel(R) Graphics Software before version…https://agentprime.io/advisories/CVE-2025-32092/https://agentprime.io/advisories/CVE-2025-32092/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 16:25:46 GMTCVECVE-2025-37174: Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interfacehttps://agentprime.io/advisories/CVE-2025-37174/https://agentprime.io/advisories/CVE-2025-37174/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 20:05:33 GMTCVESpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Resultshttps://agentprime.io/advisories/GHSA-9m7r-g8hg-x3vr/https://agentprime.io/advisories/GHSA-9m7r-g8hg-x3vr/github.com/authzed/spicedb <1.47.1, fixed in 1.47.1. CVSS 2.9 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 21 Nov 2025 18:06:00 GMTGogithub.com/authzed/spicedbCVE-2025-64185: Open OnDemand RPM packages create world writable locationshttps://agentprime.io/advisories/CVE-2025-64185/https://agentprime.io/advisories/CVE-2025-64185/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Nov 2025 16:58:01 GMTCVECVE-2025-24327: Intel(R) Rapid Storage Technology Application: Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application…https://agentprime.io/advisories/CVE-2025-24327/https://agentprime.io/advisories/CVE-2025-24327/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Nov 2025 16:49:45 GMTCVECVE-2025-11554: Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissionshttps://agentprime.io/advisories/CVE-2025-11554/https://agentprime.io/advisories/CVE-2025-11554/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 20:02:06 GMTCVECVE-2025-56019: An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication.https://agentprime.io/advisories/CVE-2025-56019/https://agentprime.io/advisories/CVE-2025-56019/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Oct 2025 00:00:00 GMTCVECoder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coderhttps://agentprime.io/advisories/GHSA-j6xf-jwrj-v5qp/https://agentprime.io/advisories/GHSA-j6xf-jwrj-v5qp/github.com/coder/coder *, no fixed version yet. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 17 Sep 2025 17:03:49 GMTGogithub.com/coder/codergithub.com/coder/coder/v2Information Disclosure in Amazon ECS Container Agent in github.com/aws/amazon-ecs-agenthttps://agentprime.io/advisories/GHSA-wm7x-ww72-r77q/https://agentprime.io/advisories/GHSA-wm7x-ww72-r77q/github.com/aws/amazon-ecs-agent >=0.0.3, <1.97.1, fixed in 1.97.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 18 Aug 2025 13:17:23 GMTGogithub.com/aws/amazon-ecs-agentCVE-2025-36104: IBM Storage Scale information disclosurehttps://agentprime.io/advisories/CVE-2025-36104/https://agentprime.io/advisories/CVE-2025-36104/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Jul 2025 11:30:41 GMTCVECVE-2025-32797: Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Executionhttps://agentprime.io/advisories/CVE-2025-32797/https://agentprime.io/advisories/CVE-2025-32797/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 18:46:31 GMTCVECVE-2025-3473: IBM Security Guardium privilege escalationhttps://agentprime.io/advisories/CVE-2025-3473/https://agentprime.io/advisories/CVE-2025-3473/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Jun 2025 14:24:46 GMTCVEdjango-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.https://agentprime.io/advisories/GHSA-m4jx-m5hg-qrxx/https://agentprime.io/advisories/GHSA-m4jx-m5hg-qrxx/django-helpdesk <1.0.0, fixed in 1.0.0. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sat, 31 May 2025 01:15:19 GMTPyPIdjango-helpdeskCVE-2025-22448: Intel(R) Simics(R) Package Manager software: Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software…https://agentprime.io/advisories/CVE-2025-22448/https://agentprime.io/advisories/CVE-2025-22448/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 21:02:38 GMTCVECVE-2025-20629: Intel(R) Ethernet Network Adapter E810 Series: Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet…https://agentprime.io/advisories/CVE-2025-20629/https://agentprime.io/advisories/CVE-2025-20629/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 21:02:29 GMTCVECVE-2025-20008: Intel(R) Simics(R) Package Manager software: Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software…https://agentprime.io/advisories/CVE-2025-20008/https://agentprime.io/advisories/CVE-2025-20008/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 21:01:30 GMTCVECVE-2025-31332: Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platformhttps://agentprime.io/advisories/CVE-2025-31332/https://agentprime.io/advisories/CVE-2025-31332/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 07:15:36 GMTCVECVE-2025-29982: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to WMS 5.1…https://agentprime.io/advisories/CVE-2025-29982/https://agentprime.io/advisories/CVE-2025-29982/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Apr 2025 00:06:40 GMTCVECVE-2023-28207: The issue was addressed with improved checks.https://agentprime.io/advisories/CVE-2023-28207/https://agentprime.io/advisories/CVE-2023-28207/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Mar 2025 00:19:33 GMTCVECVE-2024-51448: IBM Robotic Process Automation privilege escalationhttps://agentprime.io/advisories/CVE-2024-51448/https://agentprime.io/advisories/CVE-2024-51448/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Jan 2025 15:08:42 GMTCVECVE-2024-36294: Intel(R) DSA software: Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8…https://agentprime.io/advisories/CVE-2024-36294/https://agentprime.io/advisories/CVE-2024-36294/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 21:11:58 GMTCVECVE-2024-36276: Intel(R) CIP software: Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852…https://agentprime.io/advisories/CVE-2024-36276/https://agentprime.io/advisories/CVE-2024-36276/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 21:11:32 GMTCVECVE-2024-45599: TCC Bypass in Cursor's macOS Applicationhttps://agentprime.io/advisories/CVE-2024-45599/https://agentprime.io/advisories/CVE-2024-45599/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Sep 2024 18:02:18 GMTCVEImproper Preservation of Permissions in xxl-jobhttps://agentprime.io/advisories/GHSA-cpfp-m5qw-c4r3/https://agentprime.io/advisories/GHSA-cpfp-m5qw-c4r3/com.xuxueli:xxl-job-core <2.4.2, fixed in 2.4.2. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Aug 2024 18:31:51 GMTMavencom.xuxueli:xxl-job-coreCVE-2024-25561: Intel(R) HID Event Filter software installers: Insecure inherited permissions in some Intel(R) HID Event Filter software installers…https://agentprime.io/advisories/CVE-2024-25561/https://agentprime.io/advisories/CVE-2024-25561/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 13:45:29 GMTCVECVE-2024-23908: Flexlm License Daemons for Intel(R) FPGA software: Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software…https://agentprime.io/advisories/CVE-2024-23908/https://agentprime.io/advisories/CVE-2024-23908/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 13:45:25 GMTCVEPulp incorrectly assigns RBAC permissions in tasks that create objectshttps://agentprime.io/advisories/GHSA-9m5j-4xx9-44j9/https://agentprime.io/advisories/GHSA-9m5j-4xx9-44j9/pulpcore <=3.56.0, no fixed version yet. CVSS 6.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Aug 2024 18:30:44 GMTPyPIpulpcoreCVE-2024-36542: Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.https://agentprime.io/advisories/CVE-2024-36542/https://agentprime.io/advisories/CVE-2024-36542/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jul 2024 00:00:00 GMTCVECVE-2024-36540: Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.https://agentprime.io/advisories/CVE-2024-36540/https://agentprime.io/advisories/CVE-2024-36540/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jul 2024 00:00:00 GMTCVEcriticalCVE-2024-36539: Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.https://agentprime.io/advisories/CVE-2024-36539/https://agentprime.io/advisories/CVE-2024-36539/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jul 2024 00:00:00 GMTCVEcriticalCVE-2024-34329: Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafte…https://agentprime.io/advisories/CVE-2024-34329/https://agentprime.io/advisories/CVE-2024-34329/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Jul 2024 00:00:00 GMTCVECVE-2024-41601: Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.https://agentprime.io/advisories/CVE-2024-41601/https://agentprime.io/advisories/CVE-2024-41601/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jul 2024 00:00:00 GMTCVEApache Airflow has DAG Author Code Execution possibility in airflow-schedulerhttps://agentprime.io/advisories/GHSA-g5hv-r743-v8pm/https://agentprime.io/advisories/GHSA-g5hv-r743-v8pm/apache-airflow >=2.4.0, <2.9.3, fixed in 2.9.3. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 17 Jul 2024 09:30:49 GMTPyPIapache-airflowCVE-2024-6605: Firefox Android missed activation delay to prevent tapjackinghttps://agentprime.io/advisories/CVE-2024-6605/https://agentprime.io/advisories/CVE-2024-6605/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 14:25:57 GMTCVECVE-2024-36691: Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information.https://agentprime.io/advisories/CVE-2024-36691/https://agentprime.io/advisories/CVE-2024-36691/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 00:00:00 GMTCVECVE-2024-27848: This issue was addressed with improved permissions checking.https://agentprime.io/advisories/CVE-2024-27848/https://agentprime.io/advisories/CVE-2024-27848/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 20:56:35 GMTCVECVE-2023-45736: Intel(R) Power Gadget software for Windows: Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions…https://agentprime.io/advisories/CVE-2023-45736/https://agentprime.io/advisories/CVE-2023-45736/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 20:47:21 GMTCVECVE-2024-21835: Intel(R) XTU software: Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may…https://agentprime.io/advisories/CVE-2024-21835/https://agentprime.io/advisories/CVE-2024-21835/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 20:47:03 GMTCVECVE-2024-27847: This issue was addressed with improved checks.https://agentprime.io/advisories/CVE-2024-27847/https://agentprime.io/advisories/CVE-2024-27847/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 23:00:55 GMTCVECVE-2024-27822: A logic issue was addressed with improved restrictions.https://agentprime.io/advisories/CVE-2024-27822/https://agentprime.io/advisories/CVE-2024-27822/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 23:00:51 GMTCVECVE-2024-27825: Apple macOS: A downgrade issue affecting Intel-based Mac computers was addressed with additional…https://agentprime.io/advisories/CVE-2024-27825/https://agentprime.io/advisories/CVE-2024-27825/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 23:00:46 GMTCVECVE-2024-29417: Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function.https://agentprime.io/advisories/CVE-2024-29417/https://agentprime.io/advisories/CVE-2024-29417/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 May 2024 00:00:00 GMTCVECVE-2024-23233: This issue was addressed with improved checks.https://agentprime.io/advisories/CVE-2024-23233/https://agentprime.io/advisories/CVE-2024-23233/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 01:35:52 GMTCVECVE-2023-33870: Intel(R) Ethernet tools and driver install software: Insecure inherited permissions in some Intel(R) Ethernet tools and driver install…https://agentprime.io/advisories/CVE-2023-33870/https://agentprime.io/advisories/CVE-2023-33870/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Feb 2024 13:38:15 GMTCVE