agentprime: CWE-340

CVE-2026-118527: Ivanti Connect Secure: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and…

Tue, 03 Nov 2026 14:53:28 GMT

CVSS 4.3 (Medium). Critical: In CISA’s KEV catalogue since 30 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85297: Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

Mon, 26 Oct 2026 14:58:30 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79980: Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS

Fri, 23 Oct 2026 19:56:17 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46347: Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset

Fri, 23 Oct 2026 14:14:51 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46346: Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset

Fri, 23 Oct 2026 14:14:39 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85496: Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

Thu, 24 Sep 2026 19:47:33 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-95653: Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token

Tue, 22 Sep 2026 15:24:11 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-64964: Generation of Predictable Email Confirmation Token in ATutor

Thu, 20 Aug 2026 13:58:00 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14602: Weak File Name Generation in vsDesk

Thu, 20 Aug 2026 06:39:04 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75106: OpnForm Editable Submission Secret Derivation via Empty Hashids Salt

Mon, 17 Aug 2026 20:36:02 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13577: Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable

Mon, 20 Jul 2026 07:11:10 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47085: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

Thu, 16 Jul 2026 00:00:00 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56016: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

Wed, 01 Jul 2026 06:46:23 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9219: Setracker2 Children's Smartwatch Ecosystem Generation of Predictable Numbers or Identifiers

Thu, 25 Jun 2026 23:10:19 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11374: Account Takeover via Predictable SSO Ticket Generation

Tue, 23 Jun 2026 08:19:30 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9733: Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter

Tue, 23 Jun 2026 07:05:20 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9692: Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely

Thu, 18 Jun 2026 17:53:03 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42932: Naxclow IoT Platform Generation of Predictable Numbers or Identifiers

Fri, 12 Jun 2026 18:17:39 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

Mon, 08 Jun 2026 23:02:05 GMT

io.netty:netty-resolver-dns >=4.2.0.Final, <4.2.15.Final || <4.1.135.Final, fixed in 4.2.15.Final, 4.1.135.Final. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-8503: Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids

Fri, 15 May 2026 11:06:29 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5084: WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely

Mon, 11 May 2026 06:37:19 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5081: Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure

Wed, 06 May 2026 12:16:38 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5080: Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely

Thu, 30 Apr 2026 11:49:29 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40496: FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force

Tue, 21 Apr 2026 01:38:50 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5085: Solstice::Session versions through 1440 for Perl generates session ids insecurely

Mon, 13 Apr 2026 06:56:14 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5083: Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Wed, 08 Apr 2026 05:53:16 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5082: Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id

Wed, 08 Apr 2026 05:48:43 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28810: Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver

Tue, 07 Apr 2026 07:50:11 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13044: Multiple Vulnerabilities in IBM Concert Software

Tue, 07 Apr 2026 01:07:38 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3256: HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids

Sat, 28 Mar 2026 18:52:39 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-15604: Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

Sat, 28 Mar 2026 18:43:56 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

Tue, 17 Mar 2026 20:34:21 GMT

bedrock-agentcore-starter-toolkit <0.1.13, fixed in 0.1.13. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-40931: Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

Thu, 05 Mar 2026 01:41:09 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40926: Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely

Thu, 05 Mar 2026 01:24:34 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3255: HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function

Fri, 27 Feb 2026 20:12:35 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40932: Apache::SessionX versions through 2.01 for Perl create insecure session id

Thu, 26 Feb 2026 23:33:37 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming

Fri, 20 Feb 2026 21:31:24 GMT

google-cloud-aiplatform >=1.21.0, <1.133.0, fixed in 1.133.0. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-2439: Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids

Mon, 16 Feb 2026 21:25:21 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Jervis has Deterministic AES IV Derivation from Passphrase

Tue, 13 Jan 2026 14:51:58 GMT

net.gleske:jervis <2.2, fixed in 2.2. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-69286: RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

Wed, 31 Dec 2025 21:52:54 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62294: Predictable Generation of Password Recovery Token

Thu, 20 Nov 2025 15:43:40 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-58424: BIG-IP TMM vulnerability

Wed, 15 Oct 2025 13:55:47 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-3449: Weak Session Token used in Automation Runtime SDM

Tue, 07 Oct 2025 18:21:32 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59452: YoSmart YoLink API: The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a…

Mon, 06 Oct 2025 00:00:00 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40925: Starch versions 0.14 and earlier generate session ids insecurely

Sat, 20 Sep 2025 12:31:34 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40933: Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely

Wed, 17 Sep 2025 14:25:10 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10148: predictable WebSocket mask

Fri, 12 Sep 2025 05:10:37 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40920: Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces

Mon, 11 Aug 2025 20:19:57 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40924: Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely

Thu, 17 Jul 2025 13:33:43 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40919: Authen::DigestMD5 versions 0.01 through 0.04 for Perl generate the cnonce insecurely

Wed, 16 Jul 2025 14:04:09 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.