<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-282</title><description>Every new CWE-282 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108304: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.</title><link>https://agentprime.io/advisories/CVE-2026-108304/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108304/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Oct 2026 17:35:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86769: Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout</title><link>https://agentprime.io/advisories/CVE-2026-86769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86769/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 13:32:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-50130: Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`</title><link>https://agentprime.io/advisories/CVE-2026-50130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50130/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 21:35:00 GMT</pubDate><category>CVE</category></item><item><title>OpenStack Cyborg&apos;s Accelerator Request (ARQ) API does not enforce project ownership at any layer</title><link>https://agentprime.io/advisories/GHSA-mmpc-xjxr-5hf8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-mmpc-xjxr-5hf8/</guid><description>openstack-cyborg &lt;16.0.1, fixed in 16.0.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 00:31:34 GMT</pubDate><category>PyPI</category><category>openstack-cyborg</category></item><item><title>CVE-2026-3867: An improper ownership management vulnerability has been identified in Moxa’s Secure Router.</title><link>https://agentprime.io/advisories/CVE-2026-3867/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3867/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Apr 2026 02:54:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-23514: Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management</title><link>https://agentprime.io/advisories/CVE-2026-23514/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-23514/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Mar 2026 14:19:01 GMT</pubDate><category>CVE</category></item><item><title>Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials</title><link>https://agentprime.io/advisories/GHSA-3fm2-hx3h-xm4v/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3fm2-hx3h-xm4v/</guid><description>com.datapipe.jenkins.plugins:hashicorp-vault-plugin &lt;=371, no fixed version yet. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Dec 2025 18:30:27 GMT</pubDate><category>Maven</category><category>com.datapipe.jenkins.plugins:hashicorp-vault-plugin</category></item><item><title>CVE-2025-57732: JetBrains TeamCity: In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect…</title><link>https://agentprime.io/advisories/CVE-2025-57732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57732/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Aug 2025 09:14:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-1112: IBM OpenPages with Watson information disclosure</title><link>https://agentprime.io/advisories/CVE-2025-1112/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-1112/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Jul 2025 14:33:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46416: Nix: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user…</title><link>https://agentprime.io/advisories/CVE-2025-46416/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46416/</guid><description>CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3629: IBM InfoSphere Information Server file manipulation</title><link>https://agentprime.io/advisories/CVE-2025-3629/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3629/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 21 Jun 2025 12:45:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32946: PeerTube Arbitrary Playlist Creation via ActivityPub Protocol</title><link>https://agentprime.io/advisories/CVE-2025-32946/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32946/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 12:58:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32945: PeerTube Arbitrary Playlist Creation via REST API</title><link>https://agentprime.io/advisories/CVE-2025-32945/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32945/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 12:56:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27254: GE Vernova EnerVista UR Setup: CWE-282 &quot;Improper Ownership Management&quot; in GE Vernova EnerVista UR Setup allows…</title><link>https://agentprime.io/advisories/CVE-2025-27254/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27254/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Mar 2025 09:05:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13249: Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013</title><link>https://agentprime.io/advisories/CVE-2024-13249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13249/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jan 2025 18:55:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13246: Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010</title><link>https://agentprime.io/advisories/CVE-2024-13246/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13246/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jan 2025 18:52:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-43176: IBM OpenPages information disclosure</title><link>https://agentprime.io/advisories/CVE-2024-43176/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43176/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jan 2025 14:03:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-47816: Users can impersonate import requesters if their actor IDs coincide in ImportDump</title><link>https://agentprime.io/advisories/CVE-2024-47816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-47816/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 18:19:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-39755: Veertu Anka Build: A privilege escalation vulnerability exists in the node update functionality of Veertu…</title><link>https://agentprime.io/advisories/CVE-2024-39755/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39755/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Oct 2024 15:16:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-8949: SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management</title><link>https://agentprime.io/advisories/CVE-2024-8949/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8949/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Sep 2024 19:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45104: A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.</title><link>https://agentprime.io/advisories/CVE-2024-45104/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45104/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Sep 2024 17:28:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45103: A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.</title><link>https://agentprime.io/advisories/CVE-2024-45103/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45103/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Sep 2024 17:28:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37999: A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions).</title><link>https://agentprime.io/advisories/CVE-2024-37999/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37999/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jul 2024 10:29:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3383: PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)</title><link>https://agentprime.io/advisories/CVE-2024-3383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3383/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 17:06:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-7226: meetyoucrop big-whale Admin Module all.api improper ownership management</title><link>https://agentprime.io/advisories/CVE-2023-7226/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7226/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 20:31:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0989: Improper Ownership Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-0989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0989/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Sep 2023 06:30:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0386: Kernel: A flaw was found in the Linux kernel…</title><link>https://agentprime.io/advisories/CVE-2023-0386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0386/</guid><description>CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 17 Jun 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2022-29187: Bypass of safe.directory protections in Git</title><link>https://agentprime.io/advisories/CVE-2022-29187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-29187/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Jul 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0026: Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-0026/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0026/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 May 2022 16:30:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-10632: ICSA-20-140-02 Emerson OpenEnterprise</title><link>https://agentprime.io/advisories/CVE-2020-10632/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-10632/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Feb 2022 18:50:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12189: Red Hat, Inc. Red Hat JBoss Enterprise Application Platform: It was discovered that the jboss init script as used in Red Hat JBoss Enterprise…</title><link>https://agentprime.io/advisories/CVE-2017-12189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12189/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jan 2018 19:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>