<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-406</title><description>Every new CWE-406 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-106465: Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server</title><link>https://agentprime.io/advisories/CVE-2026-106465/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-106465/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 17:47:11 GMT</pubDate><category>CVE</category></item><item><title>hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)</title><link>https://agentprime.io/advisories/GHSA-6w6g-hm98-mhgm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6w6g-hm98-mhgm/</guid><description>hickory-resolver &gt;=0.26.0-beta.1, &lt;0.26.2, fixed in 0.26.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 22:55:10 GMT</pubDate><category>crates.io</category><category>hickory-resolver</category></item><item><title>CVE-2026-16515: ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr&apos;s IPv6 stack</title><link>https://agentprime.io/advisories/CVE-2026-16515/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16515/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:30:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-68080: Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service</title><link>https://agentprime.io/advisories/CVE-2026-68080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-68080/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 05:51:22 GMT</pubDate><category>CVE</category></item><item><title>QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding</title><link>https://agentprime.io/advisories/GHSA-85rg-p3fr-xc2f/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-85rg-p3fr-xc2f/</guid><description>com.quietterminal:qti-neon =1.0.0, no fixed version yet. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 16:36:47 GMT</pubDate><category>Maven</category><category>com.quietterminal:qti-neon</category><category>npm</category><category>qti-neon</category><category>PyPI</category></item><item><title>CVE-2026-50045: &apos;max-global-quota&apos; reset by DNSSEC validation restarts</title><link>https://agentprime.io/advisories/CVE-2026-50045/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50045/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Jul 2026 13:07:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-45557: Technitium DNS Server excessive DNSSEC requests</title><link>https://agentprime.io/advisories/CVE-2026-45557/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45557/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:47:47 GMT</pubDate><category>CVE</category></item><item><title>PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`</title><link>https://agentprime.io/advisories/GHSA-7hmv-4j2j-pp6f/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7hmv-4j2j-pp6f/</guid><description>pocketmine/pocketmine-mp &lt;5.39.2, fixed in 5.39.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 22:54:10 GMT</pubDate><category>Packagist</category><category>pocketmine/pocketmine-mp</category></item><item><title>OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check</title><link>https://agentprime.io/advisories/GHSA-h656-5vcf-cm23/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h656-5vcf-cm23/</guid><description>openclaw &lt;2026.2.24, fixed in 2026.2.24. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Mar 2026 19:08:30 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>DoS Vulnerability in ntpd-rs</title><link>https://agentprime.io/advisories/GHSA-4855-q42w-5vr4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4855-q42w-5vr4/</guid><description>ntpd-rs &gt;=1.2.0, &lt;1.6.2, fixed in 1.6.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Aug 2025 20:07:27 GMT</pubDate><category>crates.io</category><category>ntpd-rs</category></item><item><title>CVE-2021-38135: Possible External service interaction Vulnerability in OpenText iManager</title><link>https://agentprime.io/advisories/CVE-2021-38135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38135/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Nov 2024 15:34:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-49203: Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a larg…</title><link>https://agentprime.io/advisories/CVE-2023-49203/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-49203/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Sep 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28456: An issue was discovered in Technitium through 11.0.2.</title><link>https://agentprime.io/advisories/CVE-2023-28456/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28456/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Sep 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28455: An issue was discovered in Technitium through 11.0.2.</title><link>https://agentprime.io/advisories/CVE-2023-28455/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28455/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Sep 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25015: IBM MQ denial of service</title><link>https://agentprime.io/advisories/CVE-2024-25015/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25015/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 May 2024 16:16:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2014-125036: drybjed ansible-ntp main.yml amplification</title><link>https://agentprime.io/advisories/CVE-2014-125036/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2014-125036/</guid><description>CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Jan 2023 17:11:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0028: PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering</title><link>https://agentprime.io/advisories/CVE-2022-0028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0028/</guid><description>CVSS 8.6 (High). Critical: In CISA’s KEV catalogue since 22 Aug 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Aug 2022 16:00:16 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-4234: OpenVPN Access Server: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple…</title><link>https://agentprime.io/advisories/CVE-2021-4234/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-4234/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Jul 2022 19:10:17 GMT</pubDate><category>CVE</category></item><item><title>Jenkins vulnerable to UDP amplification reflection attack</title><link>https://agentprime.io/advisories/GHSA-gpxv-776p-7gc7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gpxv-776p-7gc7/</guid><description>org.jenkins-ci.main:jenkins-core &lt;2.204.2 || &gt;=2.205, &lt;2.219, fixed in 2.204.2, 2.219. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 May 2022 17:07:40 GMT</pubDate><category>Maven</category><category>org.jenkins-ci.main:jenkins-core</category></item><item><title>CVE-2021-38429: OCI OpenDDS Secure Network Amplification</title><link>https://agentprime.io/advisories/CVE-2021-38429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38429/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 May 2022 15:26:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-38425: eProsima Fast DDS Network Amplification</title><link>https://agentprime.io/advisories/CVE-2021-38425/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38425/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 May 2022 15:24:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43547: TwinOaks Computing CoreDX DDS Secure Network Amplification</title><link>https://agentprime.io/advisories/CVE-2021-43547/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43547/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 May 2022 15:19:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-38487: Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro</title><link>https://agentprime.io/advisories/CVE-2021-38487/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38487/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 May 2022 15:18:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-14850: A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.</title><link>https://agentprime.io/advisories/CVE-2019-14850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-14850/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Mar 2021 18:56:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-10772: unbound: An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux…</title><link>https://agentprime.io/advisories/CVE-2020-10772/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-10772/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Nov 2020 17:40:05 GMT</pubDate><category>CVE</category></item></channel></rss>