agentprime: CWE-349

CVE-2026-59263: Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

Wed, 04 Nov 2026 11:01:51 GMT

CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Unverified Sign in with Apple callback parameter can override verified ID token claims

Fri, 30 Oct 2026 23:55:23 GMT

assent >=0.1.25, <0.3.2, fixed in 0.3.2. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-112256: Logon bypass (trust of attacker-controlled completed-methods list)

Thu, 29 Oct 2026 15:31:18 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

Fri, 23 Oct 2026 20:52:28 GMT

gix >=0.88.0, <0.90.0, fixed in 0.90.0. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

Thu, 15 Oct 2026 20:15:27 GMT

nuxt-og-image >=6.2.5, <6.7.0, fixed in 6.7.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-100755: Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

Tue, 13 Oct 2026 01:05:31 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48100: Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages

Mon, 28 Sep 2026 16:43:06 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-95985: Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

Thu, 24 Sep 2026 17:07:47 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

wlc may disclose API tokens to project-configured URLs

Tue, 22 Sep 2026 20:34:07 GMT

wlc <2.0.1, fixed in 2.0.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification

Wed, 16 Sep 2026 14:10:08 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts

Wed, 16 Sep 2026 13:58:11 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54047: Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation

Fri, 11 Sep 2026 16:23:48 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74916: WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

Tue, 01 Sep 2026 07:38:31 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15387: Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

Wed, 26 Aug 2026 13:36:05 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

Mon, 24 Aug 2026 20:09:51 GMT

django-cms <5.0.8, fixed in 5.0.8. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-50252: Possible cache poisoning attack by mapping source port population per thread

Wed, 22 Jul 2026 13:08:54 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41120: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to WMS 5.5 HF1…

Thu, 25 Jun 2026 13:28:53 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33612: ZoneToCache can poison the cache

Thu, 25 Jun 2026 12:58:27 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45602: Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

Tue, 09 Jun 2026 17:05:38 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42960: Possible cache poisoning via promiscuous records for the authority section

Wed, 20 May 2026 09:21:02 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

Tue, 19 May 2026 20:03:24 GMT

nuxt >=3.1.0, <3.21.6 || >=4.0.0-alpha.1, <4.4.6, fixed in 3.21.6, 4.4.6. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Next.js's Middleware / Proxy redirects can be cache-poisoned

Mon, 11 May 2026 16:12:07 GMT

next >=12.2.0, <15.5.16 || >=16.0.0, <16.2.5, fixed in 15.5.16, 16.2.5. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

Tue, 05 May 2026 19:23:45 GMT

gix >=0.31.0, <0.83.0, fixed in 0.83.0. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-32162: Windows COM Elevation of Privilege Vulnerability

Tue, 14 Apr 2026 16:58:29 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders

Tue, 07 Apr 2026 18:15:59 GMT

openclaw <2026.4.2, fixed in 2026.4.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw has an Arbitrary Malicious Code Execution Vulnerability

Mon, 30 Mar 2026 18:52:09 GMT

openclaw <2026.3.24, fixed in 2026.3.24. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-1642: NGINX vulnerability

Wed, 04 Feb 2026 15:02:06 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-68269: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of…

Tue, 16 Dec 2025 15:27:32 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-1680: An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Ho…

Thu, 23 Oct 2025 13:56:39 GMT

CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40778: Cache poisoning attacks with unsolicited RRs

Wed, 22 Oct 2025 15:47:13 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-11411: Possible domain hijacking via promiscuous records in the authority section

Wed, 22 Oct 2025 12:28:02 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-11703: WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning

Sat, 18 Oct 2025 06:42:46 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-5994: Cache poisoning via the ECS-enabled Rebirthday Attack

Wed, 16 Jul 2025 14:38:22 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40776: Birthday Attack against Resolvers supporting ECS

Wed, 16 Jul 2025 13:41:01 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-48804: Windows BitLocker Security Feature Bypass Vulnerability

Tue, 08 Jul 2025 16:57:38 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-46339: FreshRSS vulnerable to favicon cache poisoning via proxy

Wed, 04 Jun 2025 20:04:54 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20255: Cisco Webex Meetings: A vulnerability in client join services of Cisco Webex Meetings could allow an…

Wed, 21 May 2025 16:43:30 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-29842: UrlMon Security Feature Bypass Vulnerability

Tue, 13 May 2025 16:59:03 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-29816: Microsoft Word Security Feature Bypass Vulnerability

Tue, 08 Apr 2025 17:24:18 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Nuxt allows DOS via cache poisoning with payload rendering response

Wed, 19 Mar 2025 19:54:25 GMT

nuxt >=3.0.0, <3.16.0, fixed in 3.16.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

check-jsonschema default caching for remote schemas allows for cache confusion

Mon, 02 Dec 2024 17:29:05 GMT

check-jsonschema <0.30.0, fixed in 0.30.0. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-52555: JetBrains WebStorm: In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible…

Fri, 15 Nov 2024 15:05:03 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Next.js Cache Poisoning

Tue, 17 Sep 2024 21:58:09 GMT

next >=13.5.1, <13.5.7 || >=14.0.0, <14.2.10, fixed in 13.5.7, 14.2.10. CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.59 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-42483: ESP-NOW Replay Attacks Vulnerability

Thu, 12 Sep 2024 14:12:18 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-41924: Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series.

Tue, 30 Jul 2024 08:45:48 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

DNSJava DNSSEC Bypass

Mon, 22 Jul 2024 14:33:41 GMT

dnsjava:dnsjava <3.6.0, fixed in 3.6.0. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

aiosmtpd STARTTLS unencrypted commands injection

Mon, 20 May 2024 14:59:07 GMT

aiosmtpd <1.4.6, fixed in 1.4.6. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-21094: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

Tue, 16 Apr 2024 21:26:30 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-51655: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted…

Thu, 21 Dec 2023 09:57:04 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-44317: Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Tue, 14 Nov 2023 11:03:48 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.