# CWE-305.

Every Advisory and CVE whose sources give the weakness CWE-305, newest first.

## Records, newest first (an older page)

- [VMware ESXi contains an authentication bypass vulnerability.](https://agentprime.io/advisories/CVE-2024-37085.md)
  `CVE-2024-37085` · CVE record: VMware ESXi and 1 more · CVSS 6.8 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 0.27 · Not analysed yet · Published 25 Jun 2024 · Tags: CWE-305
- [Ca: token authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2023-4727.md)
  `CVE-2023-4727` · CVE record: Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-305
- [MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2024-36388.md)
  `CVE-2024-36388` · CVE record: MileSight DeviceHub · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2024 · Tags: CWE-305
- [Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process](https://agentprime.io/advisories/GHSA-93x3-m7pw-ppqm.md)
  `GHSA-93x3-m7pw-ppqm`, `CVE-2024-34077`, `PKSA-vn99-1c14-x82z` · Packagist `mantisbt/mantisbt`: affected `<2.26.2`, fixed in `2.26.2` · CVSS 7.3 High · Not analysed yet · Published 13 May 2024 · Tags: CWE-305, CWE-620
- [A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.](https://agentprime.io/advisories/CVE-2024-20378.md)
  `CVE-2024-20378` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 May 2024 · Tags: CWE-305
- [Google Chrome: Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed…](https://agentprime.io/advisories/CVE-2024-3847.md)
  `CVE-2024-3847` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-305, CWE-691
- [Authentication Bypass in TeoSOFT Software TeoBASE](https://agentprime.io/advisories/CVE-2023-6153.md)
  `CVE-2023-6153` · CVE record: TeoSOFT Software TeoBASE · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-305
- [Authentication Bypass in XPodas' Octopod](https://agentprime.io/advisories/CVE-2024-1202.md)
  `CVE-2024-1202` · CVE record: XPodas Octopod · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2024 · Tags: CWE-305
- [Authentication Bypass in ZKSoftware's UFace 5](https://agentprime.io/advisories/CVE-2023-7103.md)
  `CVE-2023-7103` · CVE record: ZKSoftware Biometric Security Solutions UFace 5 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2024 · Tags: CWE-305
- [Authentication Bypass in OpenEdge Authentication Gateway and AdminServer](https://agentprime.io/advisories/CVE-2024-1403.md)
  `CVE-2024-1403` · CVE record: Progress OpenEdge · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Feb 2024 · Tags: CWE-305
- [In telephony, there is a possible escalation of privilege due to a permissions bypass.](https://agentprime.io/advisories/CVE-2024-20015.md)
  `CVE-2024-20015` · CVE record: MediaTek, Inc. MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6781, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 · CVSS 7.4 High · Not analysed yet · Published 5 Feb 2024 · Tags: CWE-305
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20674.md)
  `CVE-2024-20674` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-305
- [Lockscreen bypass in eWeLink App](https://agentprime.io/advisories/CVE-2023-6998.md)
  `CVE-2023-6998` · CVE record: CoolKit Technology eWeLink - Smart Home and 1 more · CVSS 7.7 High · Not analysed yet · Published 30 Dec 2023 · Tags: CWE-305
- [SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token](https://agentprime.io/advisories/CVE-2023-4939.md)
  `CVE-2023-4939` · CVE record: salesmanag0 SALESmanago & Leadoo · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2023 · Tags: CWE-305
- [NATS.io: Adding accounts for just the system account adds auth bypass](https://agentprime.io/advisories/GHSA-fr2g-9hjm-wr23.md)
  `GHSA-fr2g-9hjm-wr23`, `CVE-2023-47090`, `GO-2023-2133` · Go `github.com/nats-io/nats-server/v2`: affected `>=2.2.0, <2.9.23 || >=2.10.0, <2.10.2`, fixed in `2.9.23`, `2.10.2` · No CVSS score · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-305
- [Authentication bypass in OpenText (Micro Focus) Enterprise Server](https://agentprime.io/advisories/CVE-2023-4501.md)
  `CVE-2023-4501` · CVE record: OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2023 · Tags: Authentication bypass, CWE-253, CWE-305, CWE-358
- [Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2023-4898.md)
  `CVE-2023-4898` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2023 · Tags: CWE-305
- [Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness](https://agentprime.io/advisories/CVE-2023-36497.md)
  `CVE-2023-36497` · CVE record: Dover Fueling Solutions MAGLINK LX Web Console Configuration · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2023 · Tags: CWE-305
- [Dapr API token authentication bypass in HTTP endpoints](https://agentprime.io/advisories/GHSA-59m6-82qm-vqgj.md)
  `GHSA-59m6-82qm-vqgj`, `CVE-2023-37918`, `GO-2023-1955` · Go `github.com/dapr/dapr`: affected `<1.10.9 || >=1.11.0, <1.11.2`, fixed in `1.10.9`, `1.11.2` · CVSS 6.8 Medium · Not analysed yet · Published 21 Jul 2023 · Tags: Authentication bypass, CWE-305
- [Authentication Bypass by Primary Weakness in Oliva Expertise](https://agentprime.io/advisories/CVE-2023-2959.md)
  `CVE-2023-2959` · CVE record: Oliva Expertise Oliva Expertise EKS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2023 · Tags: CWE-305
- [SonicWall GMS: SonicWall GMS and Analytics CAS Web Services application use static values for…](https://agentprime.io/advisories/CVE-2023-34137.md)
  `CVE-2023-34137` · CVE record: SonicWall GMS and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-305
- [SonicWall GMS: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient…](https://agentprime.io/advisories/CVE-2023-34124.md)
  `CVE-2023-34124` · CVE record: SonicWall GMS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.50 · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-305
- [Race condition in Avalanche](https://agentprime.io/advisories/CVE-2023-28126.md)
  `CVE-2023-28126` · CVE record: Avalanche · CVSS 5.9 Medium · EPSS 0.67 · Not analysed yet · Published 9 May 2023 · Tags: Race condition, CWE-305
- [Configuration-based MFA Bypass in PingID RADIUS PCV.](https://agentprime.io/advisories/CVE-2022-40723.md)
  `CVE-2022-40723` · CVE record: Ping Identity PingID Radius PCV and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Apr 2023 · Tags: CWE-305
- [Authentication Bypass in Redline Router](https://agentprime.io/advisories/CVE-2023-1833.md)
  `CVE-2023-1833` · CVE record: DTS Electronics Redline Router · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2023 · Tags: CWE-305
- [Panasonic AiSEG2: Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass…](https://agentprime.io/advisories/CVE-2023-28727.md)
  `CVE-2023-28727` · CVE record: Panasonic AiSEG2 · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2023 · Tags: CWE-305
- [An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr…](https://agentprime.io/advisories/CVE-2023-27538.md)
  `CVE-2023-27538` · CVE record: https\://github.com/curl/curl · CVSS 7.7 High · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-305
- [An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che…](https://agentprime.io/advisories/CVE-2023-27536.md)
  `CVE-2023-27536` · CVE record: https\://github.com/curl/curl · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-305
- [An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.](https://agentprime.io/advisories/CVE-2023-27535.md)
  `CVE-2023-27535` · CVE record: https\://github.com/curl/curl · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-305
- [Full authentication bypass if SASL authorization username is specified](https://agentprime.io/advisories/GHSA-4g76-w3xw-2x6w.md)
  `GHSA-4g76-w3xw-2x6w`, `CVE-2023-27582`, `GO-2023-1630` · Go `github.com/foxcpp/maddy`: affected `>=0.2.0, <0.6.3`, fixed in `0.6.3` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Mar 2023 · Tags: Authentication bypass, CWE-305
- [Froxlor is vulnerable to authentication bypass](https://agentprime.io/advisories/GHSA-j83x-r9qq-9g4v.md)
  `GHSA-j83x-r9qq-9g4v`, `CVE-2023-1307`, `PKSA-6y4z-4r8g-7cfk` · Packagist `froxlor/froxlor`: affected `<2.0.13`, fixed in `2.0.13` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2023 · Tags: CWE-305
- [Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.](https://agentprime.io/advisories/GHSA-rfhw-fm4m-52j6.md)
  `GHSA-rfhw-fm4m-52j6`, `CVE-2023-0777`, `PYSEC-2023-32` · PyPI `modoboa`: affected `<2.0.4`, fixed in `2.0.4` · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-305
- [A flaw was found in the openstack-barbican component.](https://agentprime.io/advisories/CVE-2022-3100.md)
  `CVE-2022-3100` · CVE record: Red Hat OpenStack Platform · CVSS 5.9 Medium · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-305
- [Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.](https://agentprime.io/advisories/GHSA-wf33-6x33-wcf9.md)
  `GHSA-wf33-6x33-wcf9`, `CVE-2022-4722`, `PYSEC-2022-43008` · PyPI `rdiffweb`: affected `<2.5.5`, fixed in `2.5.5` · CVSS 7.2 High · Not analysed yet · Published 27 Dec 2022 · Tags: CWE-305
- [Mist vulnerable to user providing a Sudo binary for authentication checks](https://agentprime.io/advisories/CVE-2022-39245.md)
  `CVE-2022-39245` · CVE record: makedeb mist · CVSS 8.4 High · Not analysed yet · Published 26 Sept 2022 · Tags: Authentication bypass, CWE-305
- [Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerabi…](https://agentprime.io/advisories/CVE-2022-38081.md)
  `CVE-2022-38081` · CVE record: OpenHarmony OpenHarmony · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2022 · Tags: CWE-305
- [multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.](https://agentprime.io/advisories/CVE-2022-38700.md)
  `CVE-2022-38700` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2022 · Tags: CWE-305
- [windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.](https://agentprime.io/advisories/CVE-2022-38064.md)
  `CVE-2022-38064` · CVE record: OpenHarmony OpenHarmony · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2022 · Tags: CWE-305
- [Cockpit Content Platform vulnerable to 2FA bypass](https://agentprime.io/advisories/GHSA-8wj3-cpmr-8whp.md)
  `GHSA-8wj3-cpmr-8whp`, `CVE-2022-2818`, `PKSA-1bzm-v7vr-v5fm` · Packagist `cockpit-hq/cockpit`: affected `<2.2.2`, fixed in `2.2.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2022 · Tags: Authentication bypass, CWE-212, CWE-305
- [Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm](https://agentprime.io/advisories/CVE-2022-2651.md)
  `CVE-2022-2651` · CVE record: bookwyrm-social bookwyrm-social/bookwyrm · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 4 Aug 2022 · Tags: CWE-305
- [Keycloak Authentication Error](https://agentprime.io/advisories/GHSA-jf86-9434-f8c2.md)
  `GHSA-jf86-9434-f8c2`, `CVE-2019-14910` · Maven `org.keycloak:keycloak-parent`: affected `>=7.0.0, <=7.0.1`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-278, CWE-305
- [Keycloak Authentication Error](https://agentprime.io/advisories/GHSA-fv4q-wm8c-wjg4.md)
  `GHSA-fv4q-wm8c-wjg4`, `CVE-2019-14909` · Maven `org.keycloak:keycloak-parent`: affected `>=7.0.0, <=7.0.1`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: Authentication bypass, CWE-305, CWE-592
- [Weak Authentication in Login Function of USC+](https://agentprime.io/advisories/CVE-2021-45031.md)
  `CVE-2021-45031` · CVE record: Mepsan USC+ · CVSS 7.7 High · Not analysed yet · Published 30 Mar 2022 · Tags: CWE-305
- [OpenVPN: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external…](https://agentprime.io/advisories/CVE-2022-0547.md)
  `CVE-2022-0547` · CVE record: OpenVPN · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Mar 2022 · Tags: CWE-305
- [When the device is in factory state, it can be access the shell without adb authentication process.](https://agentprime.io/advisories/CVE-2022-23729.md)
  `CVE-2022-23729` · CVE record: LG mobile devices · No CVSS score · Not analysed yet · Published 4 Mar 2022 · Tags: CWE-305
- [Auth bypass in Dark SDK](https://agentprime.io/advisories/CVE-2022-0451.md)
  `CVE-2022-0451` · CVE record: Google LLC Dart SDK · CVSS 6.5 Medium · Not analysed yet · Published 18 Feb 2022 · Tags: CWE-305
- [Remote code execution in Valmet DNA before Collection 2021](https://agentprime.io/advisories/CVE-2021-26726.md)
  `CVE-2021-26726` · CVE record: Valmet DNA Valmet DNA · CVSS 8.8 High · Not analysed yet · Published 16 Feb 2022 · Tags: Command injection, Information disclosure, CWE-272, CWE-305
- [Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server](https://agentprime.io/advisories/GHSA-8wrg-m8vm-5fvj.md)
  `GHSA-8wrg-m8vm-5fvj`, `CVE-2021-21403` · Go `github.com/kongchuanhujiao/server`: affected `<1.3.21`, fixed in `1.3.21` · CVSS 7.5 High · Not analysed yet · Published 15 Feb 2022 · Tags: Authentication bypass, CWE-305
- [Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers](https://agentprime.io/advisories/GHSA-jh6m-3pqw-242h.md)
  `GHSA-jh6m-3pqw-242h`, `CVE-2020-14359` · Go `github.com/keycloak/keycloak-gatekeeper`: affected `<=1.2.8`, no fixed version yet · CVSS 7.3 High · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-305
- [In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.](https://agentprime.io/advisories/CVE-2021-28503.md)
  `CVE-2021-28503` · CVE record: Arista Networks Arista EOS · CVSS 7.4 High · Not analysed yet · Published 4 Feb 2022 · Tags: CWE-305
- [Authentication Bypass in ADOdb/ADOdb](https://agentprime.io/advisories/GHSA-65mj-7c86-79jf.md)
  `GHSA-65mj-7c86-79jf`, `CVE-2021-3850`, `PKSA-mmtx-twsx-p5nt` · Packagist `adodb/adodb-php`: affected `<5.20.21 || >=5.21.0, <5.21.4`, fixed in `5.20.21`, `5.21.4` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jan 2022 · Tags: Authentication bypass, CWE-305
- [GOautodial API: The GOautodial API prior to commit 3c3a979 made on October 13th…](https://agentprime.io/advisories/CVE-2021-43175.md)
  `CVE-2021-43175` · CVE record: GOautodial GOautodial API · No CVSS score · Not analysed yet · Published 7 Dec 2021 · Tags: CWE-305
- [Authentication Bypass by CSRF Weakness](https://agentprime.io/advisories/GHSA-5629-8855-gf4g.md)
  `GHSA-5629-8855-gf4g` · RubyGems `solidus_core`: affected `<2.11.12 || >=3.0.0, <3.0.3 || >=3.1.0, <3.1.3`, fixed in `2.11.12`, `3.0.3`, `3.1.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Nov 2021 · Tags: Cross-site request forgery (CSRF), CWE-305
- [Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui](https://agentprime.io/advisories/GHSA-v988-828w-xvf2.md)
  `GHSA-v988-828w-xvf2` · PyPI `rucio-webui`: affected `>=1.26.0, <1.26.7`, fixed in `1.26.7` · No CVSS score · Not analysed yet · Published 22 Oct 2021 · Tags: Authentication bypass, CWE-305
- [OpenVPN 3 Core Library: OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to…](https://agentprime.io/advisories/CVE-2021-3547.md)
  `CVE-2021-3547` · CVE record: OpenVPN 3 Core Library · No CVSS score · Not analysed yet · Published 12 Jul 2021 · Tags: CWE-305
- [OpenVPN Access Server: OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass…](https://agentprime.io/advisories/CVE-2020-15077.md)
  `CVE-2020-15077` · CVE record: OpenVPN Access Server · No CVSS score · Not analysed yet · Published 4 Jun 2021 · Tags: CWE-305
- [OpenVPN: OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and…](https://agentprime.io/advisories/CVE-2020-15078.md)
  `CVE-2020-15078` · CVE record: OpenVPN · No CVSS score · Not analysed yet · Published 26 Apr 2021 · Tags: CWE-305
- [Authentication Bypass in Symphony Plus](https://agentprime.io/advisories/CVE-2020-24683.md)
  `CVE-2020-24683` · CVE record: ABB ABB Ability™ Symphony® Plus Operations · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Dec 2020 · Tags: CWE-305, CWE-602
- [A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16).](https://agentprime.io/advisories/CVE-2020-15787.md)
  `CVE-2020-15787` · CVE record: Siemens SIMATIC HMI Unified Comfort Panels · No CVSS score · Not analysed yet · Published 9 Sept 2020 · Tags: CWE-305
- [NCR SelfServ ATM: NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for…](https://agentprime.io/advisories/CVE-2020-10126.md)
  `CVE-2020-10126` · CVE record: NCR SelfServ ATM · No CVSS score · Not analysed yet · Published 21 Aug 2020 · Tags: CWE-305

Newest: <https://agentprime.io/advisories/tag/cwe-305.md>
Older: <https://agentprime.io/advisories/tag/cwe-305.md?cursor=WyIyMDIwLTA4LTIxVDIwOjMwOjQwLjgzNTAwMFoiLCJDVkUtMjAyMC0xMDEyNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-305&cursor=WyIyMDI0LTA3LTAyVDA3OjQyOjI0LjQ4NDAwMFoiLCJDVkUtMjAyMy00MTkyMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-305/?cursor=WyIyMDI0LTA3LTAyVDA3OjQyOjI0LjQ4NDAwMFoiLCJDVkUtMjAyMy00MTkyMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.