<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-334</title><description>Every new CWE-334 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-122118: In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.</title><link>https://agentprime.io/advisories/CVE-2026-122118/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-122118/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 17:55:48 GMT</pubDate><category>CVE</category></item><item><title>crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain</title><link>https://agentprime.io/advisories/GHSA-rg76-677x-56q9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rg76-677x-56q9/</guid><description>crypto-js &lt;4.0.0, fixed in 4.0.0. CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 18:48:59 GMT</pubDate><category>npm</category><category>crypto-js</category><category>critical</category></item><item><title>CVE-2024-54017: Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions &lt; V11.0)…</title><link>https://agentprime.io/advisories/CVE-2024-54017/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-54017/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 08:20:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3895: Low token entropy in MegaBIP</title><link>https://agentprime.io/advisories/CVE-2025-3895/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3895/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 May 2025 10:20:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-52616: Avahi: avahi wide-area dns predictable transaction ids</title><link>https://agentprime.io/advisories/CVE-2024-52616/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-52616/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Nov 2024 20:41:11 GMT</pubDate><category>CVE</category></item><item><title>Sharks has a Bias of Polynomial Coefficients in Secret Sharing</title><link>https://agentprime.io/advisories/GHSA-jp37-5qhw-mffw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jp37-5qhw-mffw/</guid><description>sharks &lt;=0.5.0, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Nov 2024 20:03:25 GMT</pubDate><category>crates.io</category><category>sharks</category></item><item><title>CVE-2024-51720: Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE</title><link>https://agentprime.io/advisories/CVE-2024-51720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51720/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Nov 2024 18:01:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6890: Journyx Unauthenticated Password Reset Bruteforce</title><link>https://agentprime.io/advisories/CVE-2024-6890/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6890/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Aug 2024 23:09:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-6951: DJI Mavic 3 Pro: A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of…</title><link>https://agentprime.io/advisories/CVE-2023-6951/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6951/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Apr 2024 10:28:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24402: Intentionally weakened effective strength in TETRA TEA1</title><link>https://agentprime.io/advisories/CVE-2022-24402/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24402/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Oct 2023 09:32:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-39979: MXsecurity Authentication Bypass</title><link>https://agentprime.io/advisories/CVE-2023-39979/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39979/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 02 Sep 2023 12:05:48 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-20941: Cisco Firepower Management Center: A vulnerability in the web-based management interface of Cisco Firepower Management…</title><link>https://agentprime.io/advisories/CVE-2022-20941/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-20941/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Nov 2022 17:37:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-33707: Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.</title><link>https://agentprime.io/advisories/CVE-2022-33707/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-33707/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Jul 2022 13:37:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22517: Communication Components in multiple CODESYS products vulnerable to communication channel disruption</title><link>https://agentprime.io/advisories/CVE-2022-22517/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22517/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Apr 2022 18:21:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21955: Anker: An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid()…</title><link>https://agentprime.io/advisories/CVE-2021-21955/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21955/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Dec 2021 15:32:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-7566: A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the attacker has captured t…</title><link>https://agentprime.io/advisories/CVE-2020-7566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7566/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Nov 2020 21:10:22 GMT</pubDate><category>CVE</category></item></channel></rss>