<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-31</title><description>Every new CWE-31 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-94346: Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7…</title><link>https://agentprime.io/advisories/CVE-2026-94346/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94346/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Oct 2026 13:23:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108120: path traversal inKoozali - SME Server</title><link>https://agentprime.io/advisories/CVE-2026-108120/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108120/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 05:12:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104810: Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-104810/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104810/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 08:33:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104806: Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure</title><link>https://agentprime.io/advisories/CVE-2026-104806/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104806/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 08:24:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104706: Mitel MiVoice Office 400 view system files path traversal</title><link>https://agentprime.io/advisories/CVE-2026-104706/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104706/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 08:17:15 GMT</pubDate><category>CVE</category></item><item><title>pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user</title><link>https://agentprime.io/advisories/GHSA-rj98-crf4-g69w/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rj98-crf4-g69w/</guid><description>pgadmin4 &lt;8.4, fixed in 8.4. CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. CVSS score 9.9 (7.0 or more) and EPSS 0.79 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 11:50:39 GMT</pubDate><category>PyPI</category><category>pgadmin4</category><category>critical</category></item><item><title>CVE-2024-41376: dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.</title><link>https://agentprime.io/advisories/CVE-2024-41376/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41376/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Aug 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35860: A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.</title><link>https://agentprime.io/advisories/CVE-2023-35860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35860/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jun 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Jan path traversal vulnerability</title><link>https://agentprime.io/advisories/GHSA-5jqc-qj57-4hrc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5jqc-qj57-4hrc/</guid><description>@janhq/core &lt;=0.1.11, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Jun 2024 21:32:20 GMT</pubDate><category>npm</category><category>@janhq/core</category></item><item><title>CVE-2024-35429: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.</title><link>https://agentprime.io/advisories/CVE-2024-35429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35429/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 May 2024 16:20:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-35431: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64.</title><link>https://agentprime.io/advisories/CVE-2024-35431/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35431/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 May 2024 16:10:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-24998: Ivanti Avalanche: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a…</title><link>https://agentprime.io/advisories/CVE-2024-24998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-24998/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Apr 2024 01:10:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-6268: RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow.</title><link>https://agentprime.io/advisories/CVE-2019-6268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-6268/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Mar 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading ...</title><link>https://agentprime.io/advisories/GHSA-h59x-p739-982c/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h59x-p739-982c/</guid><description>langchain-core &lt;0.1.11, fixed in 0.1.11. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Mar 2024 00:15:00 GMT</pubDate><category>PyPI</category><category>langchain-core</category></item><item><title>Webtrees Path Traversal vulnerability</title><link>https://agentprime.io/advisories/GHSA-6w5q-79rf-7c49/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6w5q-79rf-7c49/</guid><description>fisharebest/webtrees &lt;=2.1.18, no fixed version yet. CVSS 4.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Feb 2024 06:30:28 GMT</pubDate><category>Packagist</category><category>fisharebest/webtrees</category></item><item><title>CVE-2024-25840: In the module &quot;Account Manager | Sales Representative &amp; Dealers | CRM&quot; (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a guest can download personal information without restriction b…</title><link>https://agentprime.io/advisories/CVE-2024-25840/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25840/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Feb 2024 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>