# CWE-358.

Every Advisory and CVE whose sources give the weakness CWE-358, newest first.

## Records, newest first (an older page)

- [Siemens SINEC Traffic Analyzer: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All…](https://agentprime.io/advisories/CVE-2024-41907.md)
  `CVE-2024-41907` · CVE record: Siemens SINEC Traffic Analyzer · CVSS 2.1 Low · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a…](https://agentprime.io/advisories/CVE-2024-7003.md)
  `CVE-2024-7003` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in Fullscreen in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2024-6995.md)
  `CVE-2024-6995` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a…](https://agentprime.io/advisories/CVE-2024-5500.md)
  `CVE-2024-5500` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a…](https://agentprime.io/advisories/CVE-2024-6772.md)
  `CVE-2024-6772` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a…](https://agentprime.io/advisories/CVE-2024-6101.md)
  `CVE-2024-6101` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 19 Jun 2024 · Tags: CWE-358
- [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-27842.md)
  `CVE-2024-27842` · CVE record: Apple macOS · CVSS 8.1 High · Not analysed yet · Published 13 May 2024 · Tags: CWE-358
- [A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500.](https://agentprime.io/advisories/CVE-2024-2617.md)
  `CVE-2024-2617` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 7.2 High · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed…](https://agentprime.io/advisories/CVE-2024-3845.md)
  `CVE-2024-3845` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-358, CWE-1068
- [Google Chrome: Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60…](https://agentprime.io/advisories/CVE-2024-3844.md)
  `CVE-2024-3844` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed…](https://agentprime.io/advisories/CVE-2024-3838.md)
  `CVE-2024-3838` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-358
- [An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component.](https://agentprime.io/advisories/CVE-2024-25545.md)
  `CVE-2024-25545` · CVE record · CVSS 7.8 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-358
- [Lenovo Synaptics Fingerprint Readers: An authentication bypass vulnerability was reported in Lenovo devices with Synaptics…](https://agentprime.io/advisories/CVE-2024-23592.md)
  `CVE-2024-23592` · CVE record: Lenovo Synaptics Fingerprint Readers · CVSS 6.3 Medium · Not analysed yet · Published 5 Apr 2024 · Tags: CWE-358
- [Google Chrome: Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a…](https://agentprime.io/advisories/CVE-2024-2174.md)
  `CVE-2024-2174` · CVE record: Google Chrome · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-358
- [RPyC's missing security check results in code execution when using numpy.array on the server-side.](https://agentprime.io/advisories/GHSA-h5cg-53g7-gqjw.md)
  `GHSA-h5cg-53g7-gqjw`, `CVE-2024-27758`, `PYSEC-2024-44` · PyPI `rpyc`: affected `>=4.0.0, <6.0.0`, fixed in `6.0.0` · CVSS 8.5 High · Not analysed yet · Published 6 Mar 2024 · Tags: Authentication bypass, CWE-358, CWE-913
- [Java: DoS Vulnerability in JSON-JAVA](https://agentprime.io/advisories/GHSA-4jq9-2xhw-jpx7.md)
  `GHSA-4jq9-2xhw-jpx7`, `CVE-2023-5072` · Maven `org.json:json`: affected `<20231013`, fixed in `20231013` · CVSS 7.5 High · Not analysed yet · Published 14 Nov 2023 · Tags: Denial of service, CWE-358
- [vantage6-server node accepts non-whitelisted algorithms from malicious server](https://agentprime.io/advisories/GHSA-vc3v-ppc7-v486.md)
  `GHSA-vc3v-ppc7-v486`, `CVE-2023-47631`, `PYSEC-2023-303`, `PYSEC-2023-304` · PyPI `vantage6-node` and 1 more: affected `<4.1.2`, fixed in `4.1.2` · CVSS 7.2 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-345, CWE-358
- [The issue was addressed with improved UI handling.](https://agentprime.io/advisories/CVE-2023-40445.md)
  `CVE-2023-40445` · CVE record: Apple iOS and iPadOS · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-358
- [Authentication bypass in OpenText (Micro Focus) Enterprise Server](https://agentprime.io/advisories/CVE-2023-4501.md)
  `CVE-2023-4501` · CVE record: OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2023 · Tags: Authentication bypass, CWE-253, CWE-305, CWE-358
- [CyberPower PowerPanel Enterprise: A non-feature complete authentication mechanism exists in the production application…](https://agentprime.io/advisories/CVE-2023-3266.md)
  `CVE-2023-3266` · CVE record: CyberPower PowerPanel Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2023 · Tags: CWE-358
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39403.md)
  `CVE-2023-39403` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-358
- [Client Spoofing within the Keycloak Device Authorisation Grant](https://agentprime.io/advisories/GHSA-f5h4-wmp5-xhg6.md)
  `GHSA-f5h4-wmp5-xhg6`, `CVE-2023-2585` · Maven `org.keycloak:keycloak-server-spi-private` and 1 more: affected `<21.1.2`, fixed in `21.1.2` · CVSS 3.5 Low · Not analysed yet · Published 30 Jun 2023 · Tags: CWE-358
- [Zoom Video Communications, Inc. Zoom for Windows Client: Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations…](https://agentprime.io/advisories/CVE-2023-28601.md)
  `CVE-2023-28601` · CVE record: Zoom Video Communications, Inc. Zoom for Windows Client · CVSS 8.3 High · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-358
- [russh may use insecure Diffie-Hellman keys](https://agentprime.io/advisories/GHSA-cqvm-j2r2-hwpg.md)
  `GHSA-cqvm-j2r2-hwpg`, `CVE-2023-28113` · crates.io `russh`: affected `<0.36.2 || >=0.37.0, <0.37.1`, fixed in `0.36.2`, `0.37.1` · CVSS 5.9 Medium · Not analysed yet · Published 17 Mar 2023 · Tags: Weak cryptography or TLS, CWE-20, CWE-358
- [Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop](https://agentprime.io/advisories/CVE-2023-22393.md)
  `CVE-2023-22393` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-358, CWE-754
- [Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.](https://agentprime.io/advisories/CVE-2021-26328.md)
  `CVE-2021-26328` · CVE record: AMD 3rd Gen EPYC · CVSS 4.4 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-358
- [SnapCenter: SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP)…](https://agentprime.io/advisories/CVE-2022-38732.md)
  `CVE-2022-38732` · CVE record: SnapCenter · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2022 · Tags: CWE-358
- [Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance.](https://agentprime.io/advisories/CVE-2022-2324.md)
  `CVE-2022-2324` · CVE record: SonicWall SonicWall Email Security · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-358
- [A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).](https://agentprime.io/advisories/CVE-2022-27220.md)
  `CVE-2022-27220` · CVE record: Siemens SINEMA Remote Connect Server · No CVSS score · Not analysed yet · Published 14 Jun 2022 · Tags: CWE-358
- [A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).](https://agentprime.io/advisories/CVE-2022-27219.md)
  `CVE-2022-27219` · CVE record: Siemens SINEMA Remote Connect Server · No CVSS score · Not analysed yet · Published 14 Jun 2022 · Tags: CWE-358
- [ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals](https://agentprime.io/advisories/CVE-2022-25152.md)
  `CVE-2022-25152` · CVE record: ITarian ITarian platform (SAAS / on-premise) · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jun 2022 · Tags: CWE-358
- [Inconsistent documentation in Apache Tomcat](https://agentprime.io/advisories/GHSA-372q-33vh-8mpc.md)
  `GHSA-372q-33vh-8mpc`, `CVE-2017-15706` · Maven `org.apache.tomcat:tomcat`: affected `>=9.0.0.M22, <9.0.2 || >=8.5.16, <8.5.24 || >=8.0.45, <8.0.48 || >=7.0.79, <7.0.84`, fixed in `9.0.2`, `8.5.24`, `8.0.48`, `7.0.84` · CVSS 5.3 Medium · Not analysed yet · Published 14 May 2022 · Tags: CWE-358, CWE-1068
- [Incorrect Permission Assignment for Critical Resource in Jenkins](https://agentprime.io/advisories/GHSA-wf9g-rh76-6jvr.md)
  `GHSA-wf9g-rh76-6jvr`, `CVE-2017-2612` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.32.2 || >=2.34, <2.44`, fixed in `2.32.2`, `2.44` · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2022 · Tags: Broken access control, CWE-358
- [Improper Authentication in Jenkins](https://agentprime.io/advisories/GHSA-m93h-5qmx-pphg.md)
  `GHSA-m93h-5qmx-pphg`, `CVE-2017-2604` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.32.2 || >=2.34, <2.44`, fixed in `2.32.2`, `2.44` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Authentication bypass, CWE-358
- [Incorrect Authorization in Jenkins Core](https://agentprime.io/advisories/GHSA-3297-944x-j7x7.md)
  `GHSA-3297-944x-j7x7`, `CVE-2017-2611` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.44`, fixed in `2.44` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Broken access control, CWE-358
- [Siemens RUGGEDCOM i800: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802…](https://agentprime.io/advisories/CVE-2021-42017.md)
  `CVE-2021-42017` · CVE record: Siemens RUGGEDCOM i800 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-358
- [Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL](https://agentprime.io/advisories/CVE-2022-22156.md)
  `CVE-2022-22156` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Weak cryptography or TLS, CWE-300, CWE-358
- [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34791.md)
  `CVE-2021-34791` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software · CVSS 4.7 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-358
- [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34790.md)
  `CVE-2021-34790` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software · CVSS 4.7 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-358
- [Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed](https://agentprime.io/advisories/CVE-2021-31375.md)
  `CVE-2021-31375` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-20, CWE-358
- [Kibana: It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could…](https://agentprime.io/advisories/CVE-2020-10743.md)
  `CVE-2020-10743` · CVE record: Kibana · No CVSS score · Not analysed yet · Published 2 Jun 2021 · Tags: CWE-358
- [openshift/console: A flaw was found in the OpenShift web console…](https://agentprime.io/advisories/CVE-2020-1761.md)
  `CVE-2020-1761` · CVE record: openshift/console · No CVSS score · Not analysed yet · Published 27 May 2021 · Tags: CWE-358
- [A flaw was found in dnsmasq in versions before 2.85.](https://agentprime.io/advisories/CVE-2021-3448.md)
  `CVE-2021-3448` · CVE record: dnsmasq · CVSS 4.0 Medium · Not analysed yet · Published 8 Apr 2021 · Tags: CWE-358
- [Partial secret key disclosure, improper safety number calculation, & inadequate encryption strength](https://agentprime.io/advisories/CVE-2021-21387.md)
  `CVE-2021-21387` · CVE record: parabirb wrongthink · CVSS 8.1 High · Not analysed yet · Published 19 Mar 2021 · Tags: Weak cryptography or TLS, CWE-358
- [A flaw was found in dnsmasq before version 2.83.](https://agentprime.io/advisories/CVE-2020-25686.md)
  `CVE-2020-25686` · CVE record: dnsmasq · No CVSS score · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-358
- [A flaw was found in dnsmasq before version 2.83.](https://agentprime.io/advisories/CVE-2020-25684.md)
  `CVE-2020-25684` · CVE record: dnsmasq · No CVSS score · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-358
- [Lenovo BIOS: In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to…](https://agentprime.io/advisories/CVE-2020-8352.md)
  `CVE-2020-8352` · CVE record: Lenovo BIOS · CVSS 2.4 Low · Not analysed yet · Published 11 Nov 2020 · Tags: CWE-358
- [Improper Restriction of Rendered UI Layers or Frames in Keycloak](https://agentprime.io/advisories/GHSA-3gg7-9q2x-79fc.md)
  `GHSA-3gg7-9q2x-79fc`, `CVE-2020-1728` · Maven `org.keycloak:keycloak-core`: affected `<=9.0.3`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-358, CWE-1021
- [ESConfig Tool able to edit configuration for newer version](https://agentprime.io/advisories/CVE-2020-7251.md)
  `CVE-2020-7251` · CVE record: McAfee, LLC Mcafee Endpoint Security (ENS) · CVSS 5.0 Medium · Not analysed yet · Published 14 Feb 2020 · Tags: CWE-358
- [Dogtag JSS: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager…](https://agentprime.io/advisories/CVE-2019-14823.md)
  `CVE-2019-14823` · CVE record: Dogtag JSS · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2019 · Tags: CWE-358
- [samba: A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to…](https://agentprime.io/advisories/CVE-2018-16860.md)
  `CVE-2018-16860` · CVE record: SAMBA samba · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2019 · Tags: CWE-358
- [Samsung Galaxy S9: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…](https://agentprime.io/advisories/CVE-2019-6742.md)
  `CVE-2019-6742` · CVE record: Samsung Galaxy S9 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jun 2019 · Tags: CWE-358
- [Red Hat wildfly: It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in…](https://agentprime.io/advisories/CVE-2019-3894.md)
  `CVE-2019-3894` · CVE record: Red Hat wildfly · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2019 · Tags: CWE-358
- [An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly…](https://agentprime.io/advisories/CVE-2019-3806.md)
  `CVE-2019-3806` · CVE record: Power DNS pdns-recursor · CVSS 5.4 Medium · Not analysed yet · Published 29 Jan 2019 · Tags: CWE-358
- [\[UNKNOWN\] samba: Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching…](https://agentprime.io/advisories/CVE-2018-16857.md)
  `CVE-2018-16857` · CVE record: \[UNKNOWN\] samba · CVSS 7.4 High · Not analysed yet · Published 28 Nov 2018 · Tags: CWE-358
- [Spring Framework has Improperly Implemented Security Check for Standard](https://agentprime.io/advisories/GHSA-3rmv-2pg5-xvqj.md)
  `GHSA-3rmv-2pg5-xvqj`, `CVE-2018-1275` · Maven `org.springframework:spring-messaging`: affected `<4.3.16.RELEASE || >=5.0.0.RELEASE, <5.0.5.RELEASE`, fixed in `4.3.16.RELEASE`, `5.0.5.RELEASE` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.57 · Not analysed yet · Published 17 Oct 2018 · Tags: Code injection, CWE-358
- [Spring Framework allows applications to expose STOMP over WebSocket endpoints](https://agentprime.io/advisories/GHSA-p5hg-3xm3-gcjg.md)
  `GHSA-p5hg-3xm3-gcjg`, `CVE-2018-1270` · Maven `org.springframework:spring-messaging`: affected `>=5.0.0.RELEASE, <5.0.5.RELEASE || <4.3.16.RELEASE`, fixed in `5.0.5.RELEASE`, `4.3.16.RELEASE` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 17 Oct 2018 · Tags: Code injection, CWE-358
- [Ansible apt_key module does not properly verify key fingerprint](https://agentprime.io/advisories/GHSA-cmwx-9m2h-x7v4.md)
  `GHSA-cmwx-9m2h-x7v4`, `CVE-2016-8614`, `PYSEC-2018-37` · PyPI `ansible`: affected `<2.2.0.0`, fixed in `2.2.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-358
- [In marshmallow library the schema "only" option treats an empty list as implying no "only" option](https://agentprime.io/advisories/GHSA-9q2p-fj49-vpxj.md)
  `GHSA-9q2p-fj49-vpxj`, `CVE-2018-17175`, `PYSEC-2018-67` · PyPI `marshmallow`: affected `<2.15.1 || >=3.0a0, <3.0.0b9`, fixed in `2.15.1`, `3.0.0b9` · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-358
- [libzypp does not reevaluate malicious rpms once downloaded](https://agentprime.io/advisories/CVE-2018-7685.md)
  `CVE-2018-7685` · CVE record: SUSE libzypp · CVSS 7.8 High · Not analysed yet · Published 31 Aug 2018 · Tags: CWE-358

Newest: <https://agentprime.io/advisories/tag/cwe-358.md>
Older: <https://agentprime.io/advisories/tag/cwe-358.md?cursor=WyIyMDE4LTA4LTMxVDE1OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC03Njg1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-358&cursor=WyIyMDI0LTA4LTIxVDIwOjIwOjIzLjM2ODAwMFoiLCJDVkUtMjAyNC03OTY1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-358/?cursor=WyIyMDI0LTA4LTIxVDIwOjIwOjIzLjM2ODAwMFoiLCJDVkUtMjAyNC03OTY1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.