agentprime: CWE-325

CVE-2026-108910: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Wed, 04 Nov 2026 20:58:28 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component

Tue, 27 Oct 2026 14:05:39 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109839: IBM Db2 Genius Hub Missing Cryptographic Step

Fri, 16 Oct 2026 17:37:58 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101294: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step

Tue, 13 Oct 2026 20:17:24 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107785: Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Fri, 09 Oct 2026 13:15:57 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16000: KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used

Fri, 02 Oct 2026 06:54:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component

Tue, 29 Sep 2026 12:36:17 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96552: sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

Wed, 23 Sep 2026 20:00:13 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81235: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to 2605.0.3.683…

Tue, 15 Sep 2026 17:43:03 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25250: eazsolution EazyFix: EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic…

Thu, 27 Aug 2026 16:55:27 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76784: Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Wed, 26 Aug 2026 17:47:54 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17666: Google Chrome: Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an…

Thu, 30 Jul 2026 00:18:47 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59776: Sony Corporation FeliCa IC chips: Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips…

Tue, 21 Jul 2026 03:06:56 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58638: Windows Boot Loader Security Feature Bypass Vulnerability

Tue, 14 Jul 2026 17:10:16 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55144: Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Tue, 14 Jul 2026 17:05:06 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6458: AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty

Tue, 23 Jun 2026 23:49:44 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

Tue, 23 Jun 2026 21:59:03 GMT

io.netty.incubator:netty-incubator-codec-ohttp <0.0.22.Final, fixed in 0.0.22.Final. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Deno: Miller-Rabin Primality Test Allows Zero Rounds

Tue, 16 Jun 2026 19:08:55 GMT

deno <2.8.1, fixed in 2.8.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-9266: A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers.

Fri, 12 Jun 2026 10:00:33 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

Tue, 09 Jun 2026 16:03:32 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path

Tue, 09 Jun 2026 16:03:31 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q

Tue, 09 Jun 2026 16:03:29 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0420: Missing TLS certificate validation in NETGEAR's ReadyCloud client app

Tue, 09 Jun 2026 15:50:53 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

net-imap vulnerable to STARTTLS stripping via invalid response timing

Mon, 04 May 2026 22:01:52 GMT

net-imap <0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4, fixed in 0.3.10, 0.4.24, 0.5.14, 0.6.4. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache HttpClient accepts SCRAM-SHA-256 authentication without proper mutual authentication verification

Wed, 22 Apr 2026 09:31:31 GMT

org.apache.httpcomponents.client5:httpclient5 >=5.6-alpha1, <5.6.1, fixed in 5.6.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-29142: Plaintext secure-mail.html

Thu, 02 Apr 2026 08:44:51 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering

Tue, 31 Mar 2026 23:50:02 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction

Mon, 23 Mar 2026 06:30:29 GMT

jsrsasign <11.1.1, fixed in 11.1.1. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

sjcl is missing point-on-curve validation in sjcl.ecc.basicKey.publicKey

Tue, 17 Mar 2026 06:31:32 GMT

sjcl <1.0.9, fixed in 1.0.9. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

Mon, 16 Mar 2026 16:15:06 GMT

authlib <1.6.9, fixed in 1.6.9. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-47383: Missing Cryptographic Step in Data Modem

Mon, 02 Mar 2026 16:53:52 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls

Tue, 27 Jan 2026 16:01:23 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Deno node:crypto doesn't finalize cipher

Fri, 16 Jan 2026 15:49:35 GMT

deno <2.6.0, fixed in 2.6.0. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-60704: Windows Kerberos Elevation of Privilege Vulnerability

Tue, 11 Nov 2025 17:59:21 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59339: The Bastion ttyrec files are not signed after encryption by the osh-encrypt-rsync script

Wed, 17 Sep 2025 17:50:34 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

frost-core: refresh shares with smaller min_signers will reduce security of group

Wed, 03 Sep 2025 21:29:18 GMT

frost-core >=2.0.0, <2.2.0, fixed in 2.2.0. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-49600: mbedtls: In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash…

Fri, 04 Jul 2025 00:00:00 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2015-20112: RLPx 5 has two CTR streams based on the same key, IV, and nonce.

Sun, 29 Jun 2025 00:00:00 GMT

CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-5323: fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking

Thu, 29 May 2025 18:00:06 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-3938: Missing Cryptographic Step

Thu, 22 May 2025 12:32:01 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-30147: ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve

Wed, 07 May 2025 18:27:41 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

sigstore has insufficient validation of integration timestamp during verification

Wed, 11 Dec 2024 18:42:00 GMT

sigstore >=2.0.0, <3.6.0, fixed in 3.6.0. CVSS 2.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Bit flip attack vulnerability in cookie-encrypter

Mon, 09 Dec 2024 21:31:02 GMT

cookie-encrypter <=1.0.1, no fixed version yet. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-20793: Cisco Touch 10 Device Insufficient Identity Verification Vulnerability

Fri, 15 Nov 2024 15:34:33 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-43547: Windows Kerberos Information Disclosure Vulnerability

Tue, 08 Oct 2024 17:35:57 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-39199: Zoom Video Communications, Inc. Zoom Clients: Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged…

Tue, 14 Nov 2023 23:06:21 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

xkeys seal encryption used fixed key for all encryption

Tue, 31 Oct 2023 21:19:02 GMT

github.com/nats-io/nats-server/v2 >=2.10.0, <2.10.4, fixed in 2.10.4. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-40012: uthenticode EKU validation bypass

Wed, 09 Aug 2023 15:33:54 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-34471: Missing Cryptographic Step

Wed, 05 Jul 2023 18:05:43 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-36539: Information disclosure in Zoom Video Communications, Inc. Zoom clients

Fri, 30 Jun 2023 02:01:21 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.