<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-279</title><description>Every new CWE-279 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-46388: osquery: Unprivileged users can temporarily read file carve contents</title><link>https://agentprime.io/advisories/CVE-2026-46388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46388/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 14:44:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4948: Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization</title><link>https://agentprime.io/advisories/CVE-2026-4948/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4948/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 05:30:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20062: Cisco Secure Firewall Adaptive Security Appliance (ASA)…: A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA)…</title><link>https://agentprime.io/advisories/CVE-2026-20062/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20062/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 17:22:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12801: Nfs-utils: rpc.mountd in the nfs-utils privilege escalation</title><link>https://agentprime.io/advisories/CVE-2025-12801/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12801/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 15:25:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14025: Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions</title><link>https://agentprime.io/advisories/CVE-2025-14025/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14025/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Jan 2026 13:44:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-36228: Incorrect Execution-Assigned Permissions in IBM Aspera Faspex</title><link>https://agentprime.io/advisories/CVE-2025-36228/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36228/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Dec 2025 14:11:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-13663: Quartus Prime Pro Edition Installer Advisory</title><link>https://agentprime.io/advisories/CVE-2025-13663/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13663/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Dec 2025 20:35:24 GMT</pubDate><category>CVE</category></item><item><title>containerd affected by a local privilege escalation via wide permissions on CRI directory</title><link>https://agentprime.io/advisories/GHSA-pwhc-rpq9-4c8w/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pwhc-rpq9-4c8w/</guid><description>github.com/containerd/containerd &lt;1.7.29, fixed in 1.7.29. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Nov 2025 15:12:08 GMT</pubDate><category>Go</category><category>github.com/containerd/containerd</category><category>github.com/containerd/containerd/v2</category></item><item><title>Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability</title><link>https://agentprime.io/advisories/GHSA-6wwv-6mm3-pp76/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6wwv-6mm3-pp76/</guid><description>org.apache.streampark:streampark &lt;=2.1.5, no fixed version yet. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Oct 2025 12:30:55 GMT</pubDate><category>Maven</category><category>org.apache.streampark:streampark</category></item><item><title>Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder</title><link>https://agentprime.io/advisories/GHSA-j6xf-jwrj-v5qp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j6xf-jwrj-v5qp/</guid><description>github.com/coder/coder *, no fixed version yet. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Sep 2025 17:03:49 GMT</pubDate><category>Go</category><category>github.com/coder/coder</category><category>github.com/coder/coder/v2</category></item><item><title>CVE-2025-26422: In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check.</title><link>https://agentprime.io/advisories/CVE-2025-26422/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26422/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Sep 2025 17:11:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23263: NVIDIA DOCA-Host and Mellanox OFED: NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature…</title><link>https://agentprime.io/advisories/CVE-2025-23263/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23263/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Jul 2025 17:19:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23233: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…</title><link>https://agentprime.io/advisories/CVE-2025-23233/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23233/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 21:02:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-22843: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…</title><link>https://agentprime.io/advisories/CVE-2025-22843/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22843/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 21:02:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20612: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…</title><link>https://agentprime.io/advisories/CVE-2025-20612/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20612/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 21:02:21 GMT</pubDate><category>CVE</category></item><item><title>aws-cdk-lib&apos;s aspect order change causes different Permissions Boundary assigned to Role</title><link>https://agentprime.io/advisories/GHSA-qc59-cxj2-c2w4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qc59-cxj2-c2w4/</guid><description>aws-cdk-lib &gt;=2.172.0, &lt;2.189.1, fixed in 2.189.1. CVSS 2.2 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 14:48:49 GMT</pubDate><category>npm</category><category>aws-cdk-lib</category></item><item><title>CVE-2024-39286: Intel(R) 800 Series Ethernet Driver: Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R)…</title><link>https://agentprime.io/advisories/CVE-2024-39286/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39286/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Feb 2025 21:18:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11220: Open Automation Software Incorrect Execution-Assigned Permissions</title><link>https://agentprime.io/advisories/CVE-2024-11220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11220/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Dec 2024 17:45:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37025: Intel(R) Advanced Link Analyzer Standard Edition software…: Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard…</title><link>https://agentprime.io/advisories/CVE-2024-37025/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37025/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 21:11:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37734: An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.</title><link>https://agentprime.io/advisories/CVE-2024-37734/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37734/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Jun 2024 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-50914: A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directori…</title><link>https://agentprime.io/advisories/CVE-2023-50914/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50914/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4665: Privilage Escalation in Saphira Connect</title><link>https://agentprime.io/advisories/CVE-2023-4665/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4665/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 Sep 2023 08:39:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3915: Incorrect Execution-Assigned Permissions in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-3915/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3915/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Sep 2023 10:01:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4383: MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions</title><link>https://agentprime.io/advisories/CVE-2023-4383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4383/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Aug 2023 20:00:05 GMT</pubDate><category>CVE</category></item><item><title>Execution with Unnecessary Privileges in ipython</title><link>https://agentprime.io/advisories/GHSA-pq7m-3gw7-gq5x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pq7m-3gw7-gq5x/</guid><description>ipython &lt;5.11 || &gt;=6.0.0, &lt;7.16.3 || &gt;=7.17.0, &lt;7.31.1 || &gt;=8.0.0, &lt;8.0.1, fixed in 5.11, 7.16.3, 7.31.1, 8.0.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Jan 2022 18:55:30 GMT</pubDate><category>PyPI</category><category>ipython</category></item><item><title>Permissions bypass in pleaser</title><link>https://agentprime.io/advisories/GHSA-vc5p-j8vw-mc6x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vc5p-j8vw-mc6x/</guid><description>pleaser &lt;0.4.0, fixed in 0.4.0. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Aug 2021 21:01:47 GMT</pubDate><category>crates.io</category><category>pleaser</category></item><item><title>Improper permission handling in Apache Solr</title><link>https://agentprime.io/advisories/GHSA-jgcr-fg3g-qvw8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jgcr-fg3g-qvw8/</guid><description>org.apache.solr:solr-core &lt;8.8.2, fixed in 8.8.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 10 May 2021 15:18:17 GMT</pubDate><category>Maven</category><category>org.apache.solr:solr-core</category></item><item><title>CVE-2020-8025: outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues</title><link>https://agentprime.io/advisories/CVE-2020-8025/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-8025/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2020 10:10:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-8441: Elastic X-Pack Security: Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply…</title><link>https://agentprime.io/advisories/CVE-2017-8441/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-8441/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Jun 2017 14:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>