agentprime: CWE-351

TYPO3 CMS - Unrestricted File Upload in Form Framework

Mon, 31 Aug 2026 19:53:59 GMT

typo3/cms-form >=14.2.0, <14.3.5, fixed in 14.3.5. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework

Tue, 14 Jul 2026 15:32:15 GMT

typo3/cms-form >=14.2.0, <14.3.5, fixed in 14.3.5. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-31951: HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability

Wed, 06 May 2026 11:47:00 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message

Fri, 24 Apr 2026 00:31:51 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message

Fri, 03 Apr 2026 03:26:51 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Contao is vulnerable to remote code execution in template closures

Tue, 25 Nov 2025 20:43:13 GMT

contao/core-bundle >=4.0.0, <4.13.57 || >=5.0.0-RC1, <5.3.42 || >=5.4.0-RC1, <5.6.5, fixed in 4.13.57, 5.3.42, 5.6.5. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time

Fri, 25 Jul 2025 19:21:31 GMT

skops <0.12.0, fixed in 0.12.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

Fri, 25 Jul 2025 19:17:34 GMT

skops <0.12.0, fixed in 0.12.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

TYPO3 Allows Unrestricted File Upload in File Abstraction Layer

Tue, 20 May 2025 19:35:21 GMT

typo3/cms-core >=9.0.0, <9.5.51 || >=10.0.0, <10.4.50 || >=11.0.0, <11.5.44 || >=12.0.0, <12.4.31 || >=13.0.0, <13.4.12, fixed in 9.5.51, 10.4.50, 11.5.44, 12.4.31, 13.4.12. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-30510: Growatt Cloud portal Insufficient Type Distinction

Tue, 15 Apr 2025 21:36:07 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32035: DNN does not check the contents of a file when uploading files

Tue, 08 Apr 2025 18:00:41 GMT

CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

Thu, 09 Jan 2025 18:51:51 GMT

strawberry-graphql >=0.182.0, <0.257.0, fixed in 0.257.0. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-45676: IBM Cognos Controller file upload

Tue, 03 Dec 2024 17:08:51 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4769: Mozilla Firefox: When importing resources using Web Workers…

Tue, 14 May 2024 17:21:24 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-38831: RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.

Wed, 23 Aug 2023 00:00:00 GMT

CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 24 Aug 2023: it is known to be exploited. CVSS score 7.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-2866: Advantech WebAccess Insufficient Type Distinction

Wed, 07 Jun 2023 20:12:46 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-1642: Incorrect type conversion in Swift Project Swift Corelib-Foundation

Thu, 16 Jun 2022 16:39:46 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-10134: Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks

Tue, 19 May 2020 15:50:14 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.