agentprime: CWE-283Every new CWE-283 Advisory and CVE.https://agentprime.io/filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionhttps://agentprime.io/advisories/GHSA-9c4x-gm8v-wgc4/https://agentprime.io/advisories/GHSA-9c4x-gm8v-wgc4/filelock >=3.30.0, <4.2.1, fixed in 4.2.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 28 Oct 2026 21:08:59 GMTPyPIfilelockCVE-2026-118029: Unverified ownership of the default Athena query result location in AWS SDK for pandashttps://agentprime.io/advisories/CVE-2026-118029/https://agentprime.io/advisories/CVE-2026-118029/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:32:56 GMTCVECVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-83791/https://agentprime.io/advisories/CVE-2026-83791/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:00:55 GMTCVECVE-2026-110237: Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Executionhttps://agentprime.io/advisories/CVE-2026-110237/https://agentprime.io/advisories/CVE-2026-110237/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:18 GMTCVECVE-2026-93853: Barman snapshot backup deletion trusts unverified backup catalog metadatahttps://agentprime.io/advisories/CVE-2026-93853/https://agentprime.io/advisories/CVE-2026-93853/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:55:51 GMTCVECVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent MCP serverhttps://agentprime.io/advisories/CVE-2026-87913/https://agentprime.io/advisories/CVE-2026-87913/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 15:43:11 GMTCVECVE-2026-87912: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecopshttps://agentprime.io/advisories/CVE-2026-87912/https://agentprime.io/advisories/CVE-2026-87912/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 15:42:11 GMTCVEgix-sec safe.directory protections absent for elevated administratorshttps://agentprime.io/advisories/GHSA-7rhf-42qf-vrvc/https://agentprime.io/advisories/GHSA-7rhf-42qf-vrvc/gix-sec <0.13.3, fixed in 0.13.3. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:34:35 GMTcrates.iogix-secCVE-2026-84386: Fortinet FortiClientWindows: A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7…https://agentprime.io/advisories/CVE-2026-84386/https://agentprime.io/advisories/CVE-2026-84386/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:41:43 GMTCVECVE-2026-85781: Unverified access point ownership in Amazon EFS CSI Driverhttps://agentprime.io/advisories/CVE-2026-85781/https://agentprime.io/advisories/CVE-2026-85781/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 18:49:53 GMTCVECVE-2026-9745: Vulnerabilities exists in IBM Netezza Softwarehttps://agentprime.io/advisories/CVE-2026-9745/https://agentprime.io/advisories/CVE-2026-9745/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 20:41:34 GMTCVECVE-2026-54467: TrustedFirmware Trusted Firmware-M: On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e…https://agentprime.io/advisories/CVE-2026-54467/https://agentprime.io/advisories/CVE-2026-54467/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 04:03:15 GMTCVECVE-2026-15599: Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joinerhttps://agentprime.io/advisories/CVE-2026-15599/https://agentprime.io/advisories/CVE-2026-15599/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 12:37:22 GMTCVECVE-2026-44707: Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accountshttps://agentprime.io/advisories/CVE-2026-44707/https://agentprime.io/advisories/CVE-2026-44707/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 17:10:08 GMTCVEOpen WebUI's Model Import Overwrites Any Model Without Ownership Checkhttps://agentprime.io/advisories/GHSA-mqq6-cqcx-38vg/https://agentprime.io/advisories/GHSA-mqq6-cqcx-38vg/open-webui <0.9.0, fixed in 0.9.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 08 May 2026 19:52:25 GMTPyPIopen-webuiCVE-2026-40337: Sentry kernel has incomplete ownership check for IRQ line manipulationhttps://agentprime.io/advisories/CVE-2026-40337/https://agentprime.io/advisories/CVE-2026-40337/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 23:51:09 GMTCVETSPortal: Any user can forge self-deletion requests for any accounthttps://agentprime.io/advisories/GHSA-gfhq-7499-f3f2/https://agentprime.io/advisories/GHSA-gfhq-7499-f3f2/miraheze/ts-portal <30, fixed in 30. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:37:10 GMTPackagistmiraheze/ts-portalImproper S3 ownership verification in Bedrock AgentCore Starter Toolkithttps://agentprime.io/advisories/GHSA-xfhr-q72q-jcrj/https://agentprime.io/advisories/GHSA-xfhr-q72q-jcrj/bedrock-agentcore-starter-toolkit <0.1.13, fixed in 0.1.13. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 17 Mar 2026 20:34:21 GMTPyPIbedrock-agentcore-starter-toolkitOpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanuphttps://agentprime.io/advisories/GHSA-jfv4-h8mc-jcp8/https://agentprime.io/advisories/GHSA-jfv4-h8mc-jcp8/openclaw <2026.2.14, fixed in 2026.2.14. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 18 Feb 2026 17:41:09 GMTnpmopenclawPterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorizationhttps://agentprime.io/advisories/GHSA-g7vw-f8p5-c728/https://agentprime.io/advisories/GHSA-g7vw-f8p5-c728/pterodactyl/panel <1.12.1, fixed in 1.12.1. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 17 Feb 2026 18:54:49 GMTPackagistpterodactyl/panelcriticalCVE-2026-0598: Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed apihttps://agentprime.io/advisories/CVE-2026-0598/https://agentprime.io/advisories/CVE-2026-0598/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 05:47:57 GMTCVEGitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/giteahttps://agentprime.io/advisories/GHSA-4xx9-vc8v-87hv/https://agentprime.io/advisories/GHSA-4xx9-vc8v-87hv/code.gitea.io/gitea <1.25.4, fixed in 1.25.4. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 02 Feb 2026 21:05:55 GMTGocode.gitea.io/giteacriticalCVE-2025-12815: AWS Research and Engineering Studio (RES): An ownership verification issue in the Virtual Desktop preview page in the Research and…https://agentprime.io/advisories/CVE-2025-12815/https://agentprime.io/advisories/CVE-2025-12815/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 17:10:34 GMTCVECVE-2025-36091: IBM Business Automation Insights unverified ownershiphttps://agentprime.io/advisories/CVE-2025-36091/https://agentprime.io/advisories/CVE-2025-36091/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Nov 2025 15:14:02 GMTCVEMautic vulnerable to secret data extraction via elfinderhttps://agentprime.io/advisories/GHSA-438m-6mhw-hq5w/https://agentprime.io/advisories/GHSA-438m-6mhw-hq5w/mautic/core >=4.4.0, <4.4.17 || >=5.0.0-alpha, <5.2.8 || >=6.0.0-alpha, <6.0.5, fixed in 4.4.17, 5.2.8, 6.0.5. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 03 Sep 2025 22:18:20 GMTPackagistmautic/coreCVE-2025-43882: Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability.https://agentprime.io/advisories/CVE-2025-43882/https://agentprime.io/advisories/CVE-2025-43882/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 13:51:40 GMTCVETYPO3 Allows Privilege Escalation to System Maintainerhttps://agentprime.io/advisories/GHSA-6frx-j292-c844/https://agentprime.io/advisories/GHSA-6frx-j292-c844/typo3/cms-core >=10.4.0, <10.4.50 || >=11.0.0, <11.5.44 || >=12.0.0, <12.4.31 || >=13.0.0, <13.4.12, fixed in 10.4.50, 11.5.44, 12.4.31, 13.4.12. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 20 May 2025 19:35:56 GMTPackagisttypo3/cms-coreCVE-2025-1007: Improper Authorization in /user/namespace/{namespace}/detailshttps://agentprime.io/advisories/CVE-2025-1007/https://agentprime.io/advisories/CVE-2025-1007/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 08:40:58 GMTCVECVE-2024-27903: OpenVPN 2: OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any…https://agentprime.io/advisories/CVE-2024-27903/https://agentprime.io/advisories/CVE-2024-27903/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jul 2024 10:27:40 GMTCVECVE-2024-1853: Zemana AntiLogger v2.74.204.664 - Arbitrary Process Terminationhttps://agentprime.io/advisories/CVE-2024-1853/https://agentprime.io/advisories/CVE-2024-1853/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Mar 2024 22:13:57 GMTCVECVE-2023-6068: On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in so…https://agentprime.io/advisories/CVE-2023-6068/https://agentprime.io/advisories/CVE-2023-6068/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Mar 2024 19:44:08 GMTCVEkiwi TCMS has possibility for user to update email address to unverified onehttps://agentprime.io/advisories/GHSA-7x6q-3v3m-cwjg/https://agentprime.io/advisories/GHSA-7x6q-3v3m-cwjg/kiwitcms <12.2, fixed in 12.2. CVSS 3.9 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 24 Apr 2023 16:46:14 GMTPyPIkiwitcmsCVE-2022-29220: No verification of commits origin in github-action-merge-dependabothttps://agentprime.io/advisories/CVE-2022-29220/https://agentprime.io/advisories/CVE-2022-29220/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 16:10:10 GMTCVEUnverified Ownership in Kuberneteshttps://agentprime.io/advisories/GHSA-j9wf-vvm6-4r9w/https://agentprime.io/advisories/GHSA-j9wf-vvm6-4r9w/k8s.io/kubernetes <=1.22.0, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Feb 2022 21:50:34 GMTGok8s.io/kubernetesCVE-2021-24501: Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actionshttps://agentprime.io/advisories/CVE-2021-24501/https://agentprime.io/advisories/CVE-2021-24501/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Aug 2021 10:04:09 GMTCVECVE-2021-24500: Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilitieshttps://agentprime.io/advisories/CVE-2021-24500/https://agentprime.io/advisories/CVE-2021-24500/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Aug 2021 10:04:08 GMTCVE