agentprime: CWE-358

Authlib: empty signatures validation in JWS JSON deserialization

Tue, 27 Oct 2026 14:50:18 GMT

authlib <1.9.0, fixed in 1.9.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:48:07 GMT

Microsoft.WindowsDesktop.App.Runtime.win-arm64 >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-96303: Microsoft PowerShell Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 19:01:17 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85805: Microsoft PowerShell Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 19:00:05 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46582: A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Wed, 22 Jul 2026 13:07:40 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65058: Trezor Safe improper security check in on-device display

Tue, 21 Jul 2026 20:13:00 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49783: Secure Boot Security Feature Bypass Vulnerability

Tue, 14 Jul 2026 17:05:50 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54431: Improper Data Validation in liboauth2

Thu, 02 Jul 2026 10:30:57 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12577: DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

Wed, 01 Jul 2026 07:05:25 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

Fri, 26 Jun 2026 20:34:29 GMT

@mcptoolshop/backpropagate >=1.1.0, <1.2.0, fixed in 1.2.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Kerby has a bypass the Kerberos pre-authentication check

Fri, 26 Jun 2026 15:32:13 GMT

org.apache.kerby:kerb-server <2.1.2, fixed in 2.1.2. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control

Fri, 12 Jun 2026 12:31:33 GMT

org.apache.cxf:cxf-rt-rs-security-oauth2 >=4.2.0, <4.2.2 || <4.1.7, fixed in 4.2.2, 4.1.7. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-11127: Google Chrome: Inappropriate implementation in WebAPKs in Google Chrome on Android prior to…

Thu, 04 Jun 2026 23:05:10 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11122: Google Chrome: Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed…

Thu, 04 Jun 2026 23:05:08 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28914: Protection mechanism failure in Apple macOS

Mon, 11 May 2026 20:07:38 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

MantisBT has a Content Security Policy bypass via attachments

Mon, 11 May 2026 19:34:48 GMT

mantisbt/mantisbt <2.28.2, fixed in 2.28.2. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Mon, 11 May 2026 16:21:19 GMT

next >=15.2.0, <15.5.18 || >=16.0.0, <16.2.6, fixed in 15.5.18, 16.2.6. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Ella Core has handover failures during concurrent Security Mode Command

Mon, 11 May 2026 15:29:41 GMT

github.com/ellanetworks/core <1.10.0, fixed in 1.10.0. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest

Mon, 11 May 2026 15:29:37 GMT

github.com/ellanetworks/core <1.10.0, fixed in 1.10.0. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

Mon, 11 May 2026 15:18:47 GMT

github.com/ellanetworks/core <1.10.0, fixed in 1.10.0. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

Thu, 07 May 2026 05:31:17 GMT

diffusers <0.38.0, fixed in 0.38.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover

Thu, 07 May 2026 01:56:13 GMT

github.com/free5gc/amf <=1.4.3, no fixed version yet. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Free5GC AMF Bypasses UE Security Capabilities on NGAP PathSwitchRequest

Thu, 07 May 2026 01:53:47 GMT

github.com/free5gc/amf <=1.4.3, no fixed version yet. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-31983: HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header

Wed, 06 May 2026 13:40:41 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-31970: HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

Wed, 06 May 2026 10:22:41 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22618: Eaton IPP software: A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP)…

Thu, 16 Apr 2026 05:11:06 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5894: Google Chrome: Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a…

Wed, 08 Apr 2026 21:20:56 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-35679: zcashd: Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain…

Sun, 05 Apr 2026 21:26:58 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-29103: SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass

Thu, 19 Mar 2026 22:54:34 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2645: Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2

Thu, 19 Mar 2026 17:10:22 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13333: IBM WebSphere Application Server could provide weaker than expected security

Tue, 17 Feb 2026 22:45:10 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens

Mon, 09 Feb 2026 21:31:03 GMT

org.keycloak:keycloak-services >=26.5.0, <26.5.3 || <26.4.9, fixed in 26.5.3, 26.4.9. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-66600: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Mon, 09 Feb 2026 03:24:33 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66601: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Mon, 09 Feb 2026 03:17:59 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66603: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Mon, 09 Feb 2026 03:15:41 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66607: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Mon, 09 Feb 2026 03:09:05 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-69234: Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.

Tue, 30 Dec 2025 01:18:05 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62002: BullWall Ransomware Containment file count detection bypass

Thu, 18 Dec 2025 20:33:55 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66323: Vulnerability of improper criterion security check in the card module.

Mon, 08 Dec 2025 08:06:34 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-58308: Vulnerability of improper criterion security check in the call module.

Fri, 28 Nov 2025 03:04:29 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62585: Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.

Thu, 16 Oct 2025 06:52:34 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62583: Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

Thu, 16 Oct 2025 06:52:12 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-25255: Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358]…

Tue, 14 Oct 2025 15:23:09 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)

Sun, 12 Oct 2025 07:37:24 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59147: Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets

Wed, 01 Oct 2025 19:27:55 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10457: Bluetooth: Out-Of-Context le_conn_rsp Handling

Fri, 19 Sep 2025 05:17:40 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43262: A permissions issue was addressed with additional restrictions.

Mon, 15 Sep 2025 22:34:19 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32086: Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or…: Improperly implemented security check for standard in the DDRIO configuration for some…

Tue, 12 Aug 2025 16:59:38 GMT

CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8204: Comodo Dragon HSTS security check

Sat, 26 Jul 2025 15:32:05 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-55599: Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS…

Tue, 08 Jul 2025 14:41:34 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.