<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-356</title><description>Every new CWE-356 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28593: In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.</title><link>https://agentprime.io/advisories/CVE-2026-28593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28593/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 18:04:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-0777: Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-0777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0777/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 22:11:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25805: Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.</title><link>https://agentprime.io/advisories/CVE-2026-25805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25805/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Feb 2026 17:27:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3839: Epiphany: insecure external protocol invocation in epiphany</title><link>https://agentprime.io/advisories/CVE-2025-3839/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3839/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 03:55:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14414: Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14414/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14414/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:24:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14415: Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14415/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:24:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14412: Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14412/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14412/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:24:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14418: pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14418/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:22:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14417: pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14417/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14417/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:22:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14416: pdfforge PDF Architect DOC File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14416/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14416/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:22:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14404: PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14404/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14404/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:21:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14403: PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14403/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14403/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:21:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14402: PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-14402/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14402/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 21:21:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58335: JetBrains Junie: In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61…</title><link>https://agentprime.io/advisories/CVE-2025-58335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58335/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 Aug 2025 16:48:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0092: Insufficient verification of data authenticity in Google Android</title><link>https://agentprime.io/advisories/CVE-2025-0092/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0092/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Aug 2025 22:48:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link</title><link>https://agentprime.io/advisories/CVE-2025-3909/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3909/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 May 2025 16:56:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-31334: RARLAB WinRAR: Issue that bypasses the &quot;Mark of the Web&quot; security warning function for files when…</title><link>https://agentprime.io/advisories/CVE-2025-31334/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-31334/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Apr 2025 05:27:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2450: NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-2450/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2450/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Mar 2025 13:18:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4187: Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.</title><link>https://agentprime.io/advisories/CVE-2024-4187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4187/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jul 2024 20:28:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-30057: Microsoft Edge for iOS Spoofing Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-30057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-30057/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jun 2024 19:24:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3044: Graphic on-click binding allows unchecked script execution</title><link>https://agentprime.io/advisories/CVE-2024-3044/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3044/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 May 2024 20:19:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2609: The permission prompt input delay could expire while the window is not in focus.</title><link>https://agentprime.io/advisories/CVE-2024-2609/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2609/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Mar 2024 12:02:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-36970: AVEVA Edge: This vulnerability allows remote attackers to execute arbitrary code on affected…</title><link>https://agentprime.io/advisories/CVE-2022-36970/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-36970/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39362: Metabase vulnerable to arbitrary SQL execution from queryhash</title><link>https://agentprime.io/advisories/CVE-2022-39362/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39362/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-35873: Inductive Automation Ignition: This vulnerability allows remote attackers to execute arbitrary code on affected…</title><link>https://agentprime.io/advisories/CVE-2022-35873/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-35873/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Jul 2022 18:17:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-13322: Xiaomi Browser: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…</title><link>https://agentprime.io/advisories/CVE-2019-13322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-13322/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Feb 2020 19:15:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-17151: Tencent WeChat: This vulnerability allows remote attackers redirect users to an external resource on…</title><link>https://agentprime.io/advisories/CVE-2019-17151/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-17151/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Jan 2020 23:05:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-6738: Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…</title><link>https://agentprime.io/advisories/CVE-2019-6738/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-6738/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2019 18:07:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-6737: Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…</title><link>https://agentprime.io/advisories/CVE-2019-6737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-6737/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2019 18:07:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-6736: Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…</title><link>https://agentprime.io/advisories/CVE-2019-6736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-6736/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2019 18:07:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-16858: [UNKNOWN] libreoffice: It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a…</title><link>https://agentprime.io/advisories/CVE-2018-16858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-16858/</guid><description>CVSS 7.8 (High). Critical: CVSS score 7.8 (7.0 or more) and EPSS 0.67 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2019 17:43:08 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2018-10595: A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor)…</title><link>https://agentprime.io/advisories/CVE-2018-10595/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-10595/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 May 2018 16:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-10593: A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA,…</title><link>https://agentprime.io/advisories/CVE-2018-10593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-10593/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 May 2018 16:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>