agentprime: CWE-300

CVE-2026-116789: FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server

Thu, 05 Nov 2026 19:29:17 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97866: Zhonglun CloudPOS Automatic Update Program.cs channel accessible

Fri, 25 Sep 2026 14:45:09 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76715: Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)

Tue, 22 Sep 2026 19:12:30 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84197: Improper certificate validation in Eclipse Foundation Eclipse Ditto

Tue, 08 Sep 2026 20:01:22 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74232: Zbtlink MQWrt yunmgrd Cloud C2 Implant

Thu, 27 Aug 2026 10:39:14 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-29419: CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

Wed, 26 Aug 2026 00:00:00 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12991: Multiple vulnerabilities in Ghost Robotics' Vision 60

Mon, 27 Jul 2026 11:44:27 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23812: Security Boundary Bypass via Routing Node Impersonation

Wed, 04 Mar 2026 16:13:48 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23811: Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation

Wed, 04 Mar 2026 16:12:32 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23810: Cross-BSSID GTK Re-encryption and Traffic Injection

Wed, 04 Mar 2026 16:11:35 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-63363: A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute…

Thu, 04 Dec 2025 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40770: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).

Tue, 12 Aug 2025 11:17:21 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54792: LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

Fri, 01 Aug 2025 23:04:29 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-50568: Fortinet FortiOS: A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version…

Tue, 10 Jun 2025 16:36:21 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-31214: This issue was addressed through improved state management.

Mon, 12 May 2025 21:42:23 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20122: Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

Wed, 07 May 2025 17:18:27 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-50565: Fortinet FortiOS: A improper restriction of communication channel to intended endpoints vulnerability…

Tue, 08 Apr 2025 14:03:51 GMT

CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-38272: IBM Cloud Pak System information disclosure

Thu, 27 Mar 2025 17:21:08 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-12602: Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Thu, 06 Feb 2025 12:27:58 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-36553: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.

Thu, 06 Feb 2025 00:00:00 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27263: IBM Sterling B2B Integrator information disclosure

Tue, 28 Jan 2025 00:10:27 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-45407: Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client

Tue, 10 Sep 2024 15:13:20 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ntlk unsafe deserialization vulnerability

Fri, 28 Jun 2024 00:33:31 GMT

nltk <3.9, fixed in 3.9. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-32049: BIG-IP Next Central Manager vulnerability

Wed, 08 May 2024 15:01:26 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-19751: easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

Tue, 30 Apr 2024 00:00:00 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

dectalk-tts Uses Unencrypted HTTP Request

Thu, 04 Apr 2024 14:21:19 GMT

dectalk-tts >=1.0.0, <1.0.1, fixed in 1.0.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-31004: IBM Security Access Manager Container gain access

Sat, 03 Feb 2024 01:03:35 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-7008: Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

Sat, 23 Dec 2023 13:00:50 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-32634: SoftEther VPN: An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of…

Thu, 12 Oct 2023 15:27:51 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4885: Multiple vulnerabilities in Open5GS

Tue, 03 Oct 2023 14:50:46 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-2310: Channel Accessible by Non-Endpoint

Wed, 10 May 2023 19:18:43 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

containernetworking/plugins vulnerable to MitM attacks

Tue, 24 May 2022 17:19:02 GMT

github.com/containernetworking/plugins <0.8.6, fixed in 0.8.6. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Missing SSH host key validation in Jenkins Amazon EC2 Plugin

Tue, 24 May 2022 17:17:14 GMT

org.jenkins-ci.plugins:ec2 <1.50.2, fixed in 1.50.2. CVSS 5.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin

Tue, 24 May 2022 17:01:41 GMT

org.jenkins-ci.plugins:google-compute-engine <4.2.0, fixed in 4.2.0. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-27768: An SSL certificate host verification vulnerability affects HCL Verse for Android

Thu, 12 May 2022 21:25:22 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Apache Tomcat affected by vulnerability in TLS and SSL protocol

Mon, 02 May 2022 03:46:22 GMT

org.apache.tomcat:tomcat >=7.0.0, <7.0.10 || >=6.0.0, <6.0.32 || >=5.0.0, <5.5.33, fixed in 7.0.10, 6.0.32, 5.5.33. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.87 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-22156: Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

Wed, 19 Jan 2022 00:20:58 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-21953: Anker: An authentication bypass vulnerability exists in the process_msg() function of the…

Wed, 22 Dec 2021 18:07:17 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-31386: Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.

Tue, 19 Oct 2021 18:17:31 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-41033: The Eclipse Foundation Eclipse Equinox: In all released versions of Eclipse Equinox…

Mon, 13 Sep 2021 20:55:09 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-32926: When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an…

Thu, 03 Jun 2021 12:35:36 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-22909: EdgeMAX EdgeRouter: A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious…

Thu, 27 May 2021 11:14:32 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-22890: curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.

Thu, 01 Apr 2021 17:46:17 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Insecure Defaults Leads to Potential MITM in ezseed-transmission

Tue, 01 Sep 2020 15:26:35 GMT

ezseed-transmission >=0.0.10, <0.0.15, fixed in 0.0.15. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-11024: Man-in-the-middle attack in Moonlight iOS/tvOS

Wed, 29 Apr 2020 20:55:13 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Machine-In-The-Middle in https-proxy-agent

Thu, 16 Apr 2020 03:14:56 GMT

https-proxy-agent <2.2.3, fixed in 2.2.3. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-3981: MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks.

Tue, 14 Jan 2020 18:13:57 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-14899: Red Hat VPN: A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS…

Wed, 11 Dec 2019 14:45:12 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-0054: Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

Wed, 09 Oct 2019 19:26:17 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-5456: UniFi: SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi…

Tue, 30 Jul 2019 20:19:48 GMT

Published by the CVE Program. Not analysed by agentprime yet.