agentprime: CWE-420

CVE-2026-105008: Windows Schannel Spoofing Vulnerability

Tue, 13 Oct 2026 19:01:37 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102134: Kiteworks Core Unprotected Alternate Channel

Wed, 30 Sep 2026 20:12:39 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-61909: An issue was discovered in Cyrus IMAP before 3.12.4.

Wed, 09 Sep 2026 00:00:00 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77639: Tor: Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could…

Thu, 20 Aug 2026 20:57:50 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Mon, 22 Jun 2026 19:58:24 GMT

comfyui-manager <3.38, fixed in 3.38. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40435: BIG-IP httpd access control vulnerability

Wed, 13 May 2026 14:12:27 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

LiteLLM has a sandbox escape in custom-code guardrail

Mon, 11 May 2026 16:17:23 GMT

litellm >=1.81.8, <1.83.10, fixed in 1.83.10. CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-43505: Prosody: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5…

Fri, 01 May 2026 14:42:33 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail

Fri, 10 Apr 2026 15:31:57 GMT

litellm >=1.81.8, <1.83.10, fixed in 1.83.10. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35388: OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Thu, 02 Apr 2026 16:57:31 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25916: Roundcube Webmail: Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13…

Mon, 09 Feb 2026 08:14:10 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-41727: Beckhoff: Performing privileged operations and gaining administrator access

Tue, 27 Jan 2026 11:36:54 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Mon, 05 Jan 2026 18:30:22 GMT

comfyui-manager <3.38, fixed in 3.38. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-62001: BullWall Ransomware Containment hard-coded folder exclusions

Thu, 18 Dec 2025 20:32:21 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66432: In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.

Sun, 30 Nov 2025 00:00:00 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13315: Unauthenticated log access in Twonky Server

Wed, 19 Nov 2025 17:41:36 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.31 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-56558: Dyson MQTT server: The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by…

Wed, 29 Oct 2025 00:00:00 GMT

CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Slack Nebula may accept arbitrary source IP addresses

Thu, 23 Oct 2025 06:31:00 GMT

github.com/slackhq/nebula >=1.9.4, <1.9.7, fixed in 1.9.7. CVSS 4.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

figma-developer-mcp vulnerable to command injection in get_figma_data tool

Tue, 30 Sep 2025 17:01:42 GMT

figma-developer-mcp <0.6.3, fixed in 0.6.3. CVSS 8.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-8557: Lenovo XClarity Orchestrator (LXCO): An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the…

Thu, 11 Sep 2025 18:34:27 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59033: Protection mechanism failure in Microsoft Windows

Mon, 08 Sep 2025 00:00:00 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54351: In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

Sun, 03 Aug 2025 00:00:00 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54309: CrushFTP: CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23…

Fri, 18 Jul 2025 00:00:00 GMT

CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 22 Jul 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.93 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52968: freedesktop xdg-utils: xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies…

Mon, 23 Jun 2025 00:00:00 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52921: InnoShop: In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager…

Mon, 23 Jun 2025 00:00:00 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-1095: IBM Personal Communications command execution

Tue, 08 Apr 2025 15:11:16 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-28693: Intel(R) Processors: Unprotected alternative channel of return branch target prediction in some Intel(R)…

Fri, 14 Feb 2025 20:50:54 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-52718: A connection hijacking vulnerability exists in some Huawei home routers.

Sat, 28 Dec 2024 07:16:22 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-7266: Some Huawei home routers have a connection hijacking vulnerability.

Sat, 28 Dec 2024 07:00:51 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

codechecker vulnerable to authentication bypass when using specifically crafted URLs

Wed, 06 Nov 2024 15:57:08 GMT

codechecker <6.24.2, fixed in 6.24.2. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Vulnerable juju introspection abstract UNIX domain socket

Thu, 03 Oct 2024 16:53:26 GMT

github.com/juju/juju <0.0.0-20240829052008-43f0fc59790d, fixed in 0.0.0-20240829052008-43f0fc59790d. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Juju Unprotected Alternate Channel vulnerability

Wed, 02 Oct 2024 12:30:33 GMT

github.com/juju/juju <0.0.0-20241001032836-2af7bd8e310b, fixed in 0.0.0-20241001032836-2af7bd8e310b. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-6242: Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

Thu, 01 Aug 2024 15:15:32 GMT

CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-6099: LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration

Tue, 02 Jul 2024 11:01:35 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4444: LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration

Fri, 10 May 2024 08:32:34 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20198: Cisco IOS XE Software: Cisco is providing an update for the ongoing investigation into observed exploitation of…

Mon, 16 Oct 2023 15:12:58 GMT

CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 16 Oct 2023: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

NI MeasurementLink Python Services Improper Access Restriction vulnerability

Thu, 05 Oct 2023 20:56:37 GMT

ni-measurementlink-service <1.1.1 || >=1.2.0.dev0, <1.2.0, fixed in 1.1.1, 1.2.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-30946: Issues notification metadata lacks authorization

Thu, 29 Jun 2023 18:49:23 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-31241: Snap One OvrC Cloud: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements…

Mon, 22 May 2023 19:26:22 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-0317: GateManager debug interface is included in non-debug builds

Wed, 19 Apr 2023 11:57:46 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Docker Swarm encrypted overlay network may be unauthenticated

Tue, 04 Apr 2023 21:13:06 GMT

github.com/docker/docker >=1.12.0, <20.10.24 || >=23.0.0, <23.0.3, fixed in 20.10.24, 23.0.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Tue, 04 Apr 2023 21:11:24 GMT

github.com/docker/docker >=1.12.0, <20.10.24 || >=23.0.0, <23.0.3, fixed in 20.10.24, 23.0.3. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-25786: GateManager debug interface is included in production builds

Wed, 04 May 2022 17:17:34 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Improper Authentication in Kubernetes

Tue, 15 Feb 2022 01:57:18 GMT

k8s.io/kubernetes <1.16.11 || >=1.17.0, <1.17.7 || >=1.18.0, <1.18.4, fixed in 1.16.11, 1.17.7, 1.18.4. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.