<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-402</title><description>Every new CWE-402 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2025-67745: Myhoard logs backup encryption key in plain text</title><link>https://agentprime.io/advisories/CVE-2025-67745/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67745/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 18:37:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-32388: Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.</title><link>https://agentprime.io/advisories/CVE-2024-32388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32388/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Dec 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>trytond allows remote attackers to obtain sensitive trace-back (server setup) information</title><link>https://agentprime.io/advisories/GHSA-jqfc-9q34-prhg/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jqfc-9q34-prhg/</guid><description>trytond &lt;6.0.70 || &gt;=7.0.0, &lt;7.0.40 || &gt;=7.1.0, &lt;7.4.21 || &gt;=7.5.0, &lt;7.6.11, fixed in 6.0.70, 7.0.40, 7.4.21, 7.6.11. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Sun, 30 Nov 2025 03:30:26 GMT</pubDate><category>PyPI</category><category>trytond</category></item><item><title>CVE-2025-55014: StarDict: The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian…</title><link>https://agentprime.io/advisories/CVE-2025-55014/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55014/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Aug 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49618: Plesk Obsidian: In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS…</title><link>https://agentprime.io/advisories/CVE-2025-49618/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49618/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Jul 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52925: OneLogin Active Directory Connector: In One Identity OneLogin Active Directory Connector before 6.1.5…</title><link>https://agentprime.io/advisories/CVE-2025-52925/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52925/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Jul 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking</title><link>https://agentprime.io/advisories/GHSA-wjrh-hj83-3wh7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wjrh-hj83-3wh7/</guid><description>django-select2 &lt;8.4.1, fixed in 8.4.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 27 May 2025 18:03:19 GMT</pubDate><category>PyPI</category><category>django-select2</category></item><item><title>CVE-2025-32360: In Zammad 6.4.x before 6.4.2, there is information exposure.</title><link>https://agentprime.io/advisories/CVE-2025-32360/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32360/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Apr 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>XWiki allows unregistered users to access private pages information through REST endpoint</title><link>https://agentprime.io/advisories/GHSA-22q5-9phm-744v/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-22q5-9phm-744v/</guid><description>org.xwiki.platform:xwiki-platform-rest-server &gt;=1.9M1, &lt;15.10.14 || &gt;=16.0.0-rc-1, &lt;16.4.6 || &gt;=16.5.0-rc-1, &lt;16.10.0-rc-1, fixed in 15.10.14, 16.4.6, 16.10.0-rc-1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Mar 2025 20:34:43 GMT</pubDate><category>Maven</category><category>org.xwiki.platform:xwiki-platform-rest-server</category></item><item><title>CVE-2025-0502: Transmission of Private Resources into a New Sphere in Crafter Engine</title><link>https://agentprime.io/advisories/CVE-2025-0502/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0502/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jan 2025 17:47:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-47146: Ruijie Reyee OS Resource Leak</title><link>https://agentprime.io/advisories/CVE-2024-47146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-47146/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Dec 2024 18:27:15 GMT</pubDate><category>CVE</category></item><item><title>@electron/packager&apos;s build process memory potentially leaked into final executable</title><link>https://agentprime.io/advisories/GHSA-34h3-8mw4-qw57/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-34h3-8mw4-qw57/</guid><description>@electron/packager &gt;=18.3.0, &lt;18.3.1, fixed in 18.3.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2024 20:16:22 GMT</pubDate><category>npm</category><category>@electron/packager</category></item><item><title>CVE-2024-0443: Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.</title><link>https://agentprime.io/advisories/CVE-2024-0443/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0443/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 23:30:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3596: Instack-undercloud: rsync leaks information to undercloud</title><link>https://agentprime.io/advisories/CVE-2022-3596/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3596/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Sep 2023 19:06:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4569: Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c</title><link>https://agentprime.io/advisories/CVE-2023-4569/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4569/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Aug 2023 21:46:12 GMT</pubDate><category>CVE</category></item><item><title>Obfuscated email addresses should not be sorted</title><link>https://agentprime.io/advisories/GHSA-g9w4-prf3-m25g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g9w4-prf3-m25g/</guid><description>org.xwiki.platform:xwiki-platform-livetable-ui &gt;=3.5-milestone-1, &lt;14.10.9 || &gt;=15.0, &lt;15.3-rc-1, fixed in 14.10.9, 15.3-rc-1. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Jul 2023 19:28:45 GMT</pubDate><category>Maven</category><category>org.xwiki.platform:xwiki-platform-livetable-ui</category></item><item><title>XWiki Platform may retrieve email addresses of all users </title><link>https://agentprime.io/advisories/GHSA-7vr7-cghh-ch63/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7vr7-cghh-ch63/</guid><description>org.xwiki.platform:xwiki-platform-livetable-ui &gt;=3.5-milestone-1, &lt;14.4.8 || &gt;=14.5, &lt;14.10.4, fixed in 14.4.8, 14.10.4. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Jun 2023 16:45:32 GMT</pubDate><category>Maven</category><category>org.xwiki.platform:xwiki-platform-livetable-ui</category></item><item><title>CVE-2022-30231: A vulnerability has been identified in SICAM GridEdge (Classic) (All versions &lt; V2.6.6).</title><link>https://agentprime.io/advisories/CVE-2022-30231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-30231/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jun 2022 09:21:53 GMT</pubDate><category>CVE</category></item><item><title>Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search</title><link>https://agentprime.io/advisories/GHSA-2wr2-8qjq-gh55/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2wr2-8qjq-gh55/</guid><description>org.craftercms:crafter-search &gt;=3.1.0, &lt;3.1.15, fixed in 3.1.15. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Dec 2021 15:27:35 GMT</pubDate><category>Maven</category><category>org.craftercms:crafter-search</category></item><item><title>CVE-2021-23263: Transmission of Private Resources into a New Sphere (&apos;Resource Leak&apos;) in Crafter Engine</title><link>https://agentprime.io/advisories/CVE-2021-23263/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-23263/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Dec 2021 15:40:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-31410: Project sources exposure in Vaadin Designer</title><link>https://agentprime.io/advisories/CVE-2021-31410/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-31410/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Apr 2021 16:08:31 GMT</pubDate><category>CVE</category></item><item><title>OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure</title><link>https://agentprime.io/advisories/GHSA-25xc-jwfq-39jw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-25xc-jwfq-39jw/</guid><description>com.vaadin:flow-server &gt;=1.2.0, &lt;2.4.8 || &gt;=6.0.0, &lt;6.0.1, fixed in 2.4.8, 6.0.1. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Apr 2021 14:50:49 GMT</pubDate><category>Maven</category><category>com.vaadin:flow-server</category></item><item><title>Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19</title><link>https://agentprime.io/advisories/GHSA-j9wr-49vq-rm5g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j9wr-49vq-rm5g/</guid><description>com.vaadin:vaadin-bom &gt;=12.0.0, &lt;14.4.10 || &gt;=19.0.0, &lt;19.0.1, fixed in 14.4.10, 19.0.1. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Apr 2021 14:46:49 GMT</pubDate><category>Maven</category><category>com.vaadin:vaadin-bom</category></item><item><title>CVE-2017-8442: Elasticsearch X-Pack Security: Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled…</title><link>https://agentprime.io/advisories/CVE-2017-8442/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-8442/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jul 2017 20:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>