<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-391</title><description>Every new CWE-391 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-67080: HCL BigFix AEX is affected by multiple security vulnerabilities.</title><link>https://agentprime.io/advisories/CVE-2026-67080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67080/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 12:25:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56727: Zammad: PGP signature spoofing via unvalidated verification return</title><link>https://agentprime.io/advisories/CVE-2026-56727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56727/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 17:02:39 GMT</pubDate><category>CVE</category></item><item><title>openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret fro...</title><link>https://agentprime.io/advisories/GHSA-p3gq-pcg9-qvfv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-p3gq-pcg9-qvfv/</guid><description>openssl-encrypt &lt;1.4.0, fixed in 1.4.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 11:16:45 GMT</pubDate><category>PyPI</category><category>openssl-encrypt</category><category>critical</category></item><item><title>Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass</title><link>https://agentprime.io/advisories/GHSA-5rph-q42j-36j9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5rph-q42j-36j9/</guid><description>picklescan *, no fixed version yet. CVSS 9.8 (Critical). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 18:35:56 GMT</pubDate><category>PyPI</category><category>picklescan</category></item><item><title>Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass</title><link>https://agentprime.io/advisories/GHSA-9gvj-pp9x-gcfr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9gvj-pp9x-gcfr/</guid><description>picklescan &lt;0.0.27, fixed in 0.0.27. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Aug 2025 00:13:55 GMT</pubDate><category>PyPI</category><category>picklescan</category><category>critical</category></item><item><title>Apache Tomcat - Authentication Bypass</title><link>https://agentprime.io/advisories/GHSA-xcpr-7mr4-h4xq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xcpr-7mr4-h4xq/</guid><description>org.apache.tomcat:tomcat-catalina &lt;9.0.96 || &gt;=10.1.0-M1, &lt;10.1.30 || &gt;=11.0.0-M1, &lt;11.0.1, fixed in 9.0.96, 10.1.30, 11.0.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Nov 2024 12:30:43 GMT</pubDate><category>Maven</category><category>org.apache.tomcat:tomcat-catalina</category><category>critical</category></item><item><title>CVE-2022-20849: Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-20849/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-20849/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 Nov 2024 15:31:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-23326: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode</title><link>https://agentprime.io/advisories/CVE-2024-23326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23326/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Jun 2024 20:05:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32871: In DA, there is a possible permission bypass due to an incorrect status check.</title><link>https://agentprime.io/advisories/CVE-2023-32871/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32871/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 May 2024 02:51:52 GMT</pubDate><category>CVE</category></item><item><title>Froxlor contains Unchecked Error Condition</title><link>https://agentprime.io/advisories/GHSA-3chw-8jq2-w769/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3chw-8jq2-w769/</guid><description>froxlor/froxlor &lt;2.0.10, fixed in 2.0.10. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Jan 2023 00:30:34 GMT</pubDate><category>Packagist</category><category>froxlor/froxlor</category></item><item><title>CVE-2022-22160: Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message</title><link>https://agentprime.io/advisories/CVE-2022-22160/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22160/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jan 2022 00:21:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-14383: A flaw was found in samba&apos;s DNS server.</title><link>https://agentprime.io/advisories/CVE-2020-14383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-14383/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Dec 2020 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA</title><link>https://agentprime.io/advisories/GHSA-2mrj-435v-c2cr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2mrj-435v-c2cr/</guid><description>ecdsa &lt;0.13.3, fixed in 0.13.3. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Dec 2019 18:15:31 GMT</pubDate><category>PyPI</category><category>ecdsa</category></item><item><title>grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file</title><link>https://agentprime.io/advisories/GHSA-rrj3-qmh8-72pf/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rrj3-qmh8-72pf/</guid><description>grunt-gh-pages &lt;0.10.0, fixed in 0.10.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Feb 2019 23:39:11 GMT</pubDate><category>npm</category><category>grunt-gh-pages</category></item><item><title>CVE-2018-1091: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POW…</title><link>https://agentprime.io/advisories/CVE-2018-1091/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-1091/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Mar 2018 21:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12187: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing…</title><link>https://agentprime.io/advisories/CVE-2017-12187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12187/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12186: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension…</title><link>https://agentprime.io/advisories/CVE-2017-12186/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12186/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12185: xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.</title><link>https://agentprime.io/advisories/CVE-2017-12185/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12185/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12184: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension…</title><link>https://agentprime.io/advisories/CVE-2017-12184/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12184/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12183: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing…</title><link>https://agentprime.io/advisories/CVE-2017-12183/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12183/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12182: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension…</title><link>https://agentprime.io/advisories/CVE-2017-12182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12182/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12181: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension…</title><link>https://agentprime.io/advisories/CVE-2017-12181/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12181/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12180: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension…</title><link>https://agentprime.io/advisories/CVE-2017-12180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12180/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12179: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in…</title><link>https://agentprime.io/advisories/CVE-2017-12179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12179/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12178: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy…</title><link>https://agentprime.io/advisories/CVE-2017-12178/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12178/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12177: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo…</title><link>https://agentprime.io/advisories/CVE-2017-12177/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12177/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12176: The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing extra length validation in…</title><link>https://agentprime.io/advisories/CVE-2017-12176/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12176/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-7496: Red Hat, Inc. fedora-arm-installer: fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege…</title><link>https://agentprime.io/advisories/CVE-2017-7496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-7496/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jun 2017 14:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>