agentprime: CWE-341Every new CWE-341 Advisory and CVE.https://agentprime.io/CVE-2026-94456: Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keyshttps://agentprime.io/advisories/CVE-2026-94456/https://agentprime.io/advisories/CVE-2026-94456/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 16:11:33 GMTCVEcriticalCVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent MCP serverhttps://agentprime.io/advisories/CVE-2026-87913/https://agentprime.io/advisories/CVE-2026-87913/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 15:43:11 GMTCVECVE-2026-87912: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecopshttps://agentprime.io/advisories/CVE-2026-87912/https://agentprime.io/advisories/CVE-2026-87912/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 15:42:11 GMTCVECVE-2026-19565: Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKeyhttps://agentprime.io/advisories/CVE-2026-19565/https://agentprime.io/advisories/CVE-2026-19565/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Aug 2026 19:18:15 GMTCVECVE-2026-15571: Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc clienthttps://agentprime.io/advisories/CVE-2026-15571/https://agentprime.io/advisories/CVE-2026-15571/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 20:40:17 GMTCVECVE-2026-38968: ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking.https://agentprime.io/advisories/CVE-2026-38968/https://agentprime.io/advisories/CVE-2026-38968/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 00:00:00 GMTCVEcriticalCVE-2026-36609: Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.https://agentprime.io/advisories/CVE-2026-36609/https://agentprime.io/advisories/CVE-2026-36609/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 00:00:00 GMTCVECVE-2026-5081: Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecurehttps://agentprime.io/advisories/CVE-2026-5081/https://agentprime.io/advisories/CVE-2026-5081/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 12:16:38 GMTCVEcriticalCVE-2026-42365: GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42365/https://agentprime.io/advisories/CVE-2026-42365/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 00:42:08 GMTCVECVE-2026-40164: jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedhttps://agentprime.io/advisories/CVE-2026-40164/https://agentprime.io/advisories/CVE-2026-40164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 23:40:12 GMTCVECVE-2025-40780: Cache poisoning due to weak PRNGhttps://agentprime.io/advisories/CVE-2025-40780/https://agentprime.io/advisories/CVE-2025-40780/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 15:48:27 GMTCVECVE-2025-42925: Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)https://agentprime.io/advisories/CVE-2025-42925/https://agentprime.io/advisories/CVE-2025-42925/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 02:09:55 GMTCVECVE-2025-48461: Weak Session Cookie Entropyhttps://agentprime.io/advisories/CVE-2025-48461/https://agentprime.io/advisories/CVE-2025-48461/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 02:02:08 GMTCVECVE-2024-10141: jsbroks COCO Annotator Session predictable statehttps://agentprime.io/advisories/CVE-2024-10141/https://agentprime.io/advisories/CVE-2024-10141/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Oct 2024 15:00:07 GMTCVECVE-2023-49259: Bruteforcing authentication cookie for a given userhttps://agentprime.io/advisories/CVE-2023-49259/https://agentprime.io/advisories/CVE-2023-49259/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jan 2024 14:25:12 GMTCVECVE-2021-4277: fredsmith utils Filename screenshot_sync predictable statehttps://agentprime.io/advisories/CVE-2021-4277/https://agentprime.io/advisories/CVE-2021-4277/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Dec 2022 10:20:15 GMTCVECVE-2020-5365: Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability.https://agentprime.io/advisories/CVE-2020-5365/https://agentprime.io/advisories/CVE-2020-5365/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2020 20:45:18 GMTCVEPredictable password in Keycloakhttps://agentprime.io/advisories/GHSA-6pmv-7pr9-cgrj/https://agentprime.io/advisories/GHSA-6pmv-7pr9-cgrj/org.keycloak:keycloak-core <8.0.2, fixed in 8.0.2. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 15 Apr 2020 21:09:27 GMTMavenorg.keycloak:keycloak-corecriticalCVE-2019-6563: Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.https://agentprime.io/advisories/CVE-2019-6563/https://agentprime.io/advisories/CVE-2019-6563/Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2019 21:00:00 GMTCVECVE-2018-17917: Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server: All versions of Hangzhou Xiongmai Technology Co…https://agentprime.io/advisories/CVE-2018-17917/https://agentprime.io/advisories/CVE-2018-17917/Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Oct 2018 15:00:00 GMTCVE