agentprime: CWE-440

CVE-2026-114049: vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

Wed, 21 Oct 2026 00:36:26 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93675: Langflow OSS is affected by multiple vulnerabilities

Wed, 07 Oct 2026 00:01:27 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Wed, 30 Sep 2026 14:46:04 GMT

urllib3 >=1.26.0, <2.8.0, fixed in 2.8.0. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted

Tue, 29 Sep 2026 15:32:12 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16769: RS9116W/SiWx917 plaintext pause encryption request causes DOS

Tue, 08 Sep 2026 15:54:41 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65934: BT122 plaintext pause encryption request causes DOS

Thu, 13 Aug 2026 14:23:00 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65932: BT122 stops advertising

Thu, 13 Aug 2026 14:20:46 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)

Tue, 07 Jul 2026 19:36:17 GMT

uucore <0.6.0, fixed in 0.6.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-8806: Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module

Fri, 19 Jun 2026 02:31:04 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42752: WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability

Mon, 15 Jun 2026 20:18:50 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49316: Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown

Fri, 29 May 2026 12:39:23 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42534: Jostle logic bypass degrades resolution performance

Wed, 20 May 2026 09:19:37 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer

Wed, 22 Apr 2026 19:54:54 GMT

github.com/free5gc/amf <=1.4.3, no fixed version yet. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Thu, 09 Apr 2026 16:41:20 GMT

fast-jwt <6.2.1, fixed in 6.2.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders

Tue, 07 Apr 2026 18:15:59 GMT

openclaw <2026.4.2, fixed in 2026.4.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-3344: WatchGuard Firebox System Integrity Check Bypass

Tue, 03 Mar 2026 13:17:56 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13940: WatchGuard Firebox Boot Time System Integrity Check Bypass

Thu, 04 Dec 2025 21:47:44 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8850: Insecure API Design in danny-avila/librechat

Thu, 30 Oct 2025 19:59:36 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52953: Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Fri, 11 Jul 2025 15:04:55 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

Thu, 10 Jul 2025 15:31:27 GMT

llama-index <0.12.41, fixed in 0.12.41. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

Mon, 07 Jul 2025 12:30:22 GMT

llama-index-readers-papers <0.3.1, fixed in 0.3.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-40555: A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).

Tue, 13 May 2025 09:38:50 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-46712: Erlang/OTP SSH Has Strict KEX Violations

Thu, 08 May 2025 19:26:27 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-26819: cJSON: cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a"…

Sat, 19 Apr 2025 00:00:00 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32728: OpenBSD OpenSSH: In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the…

Thu, 10 Apr 2025 00:00:00 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

SageMaker Workflow component allows possibility of MD5 hash collisions

Thu, 20 Mar 2025 12:32:52 GMT

sagemaker <2.237.3, fixed in 2.237.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-56202: Apache Traffic Server: Expect header field can unreasonably retain resource

Thu, 06 Mar 2025 11:09:11 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27401: In Tuleap, deleting a report can delete criteria filters in other reports

Tue, 04 Mar 2025 16:58:18 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27094: Tuleap allows default values to be cleared from field configuration

Mon, 03 Mar 2025 15:51:01 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend

Thu, 03 Oct 2024 16:51:24 GMT

@backstage/plugin-app-backend <0.3.75, fixed in 0.3.75. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-8690: Cortex XDR Agent: Local Windows Administrator Can Disable the Agent

Wed, 11 Sep 2024 16:42:39 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-7246: HPACK table poisoning in gRPC C++, Python & Ruby

Tue, 06 Aug 2024 10:14:28 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

LoLLMS vulnerable to Expected Behavior Violation

Sat, 20 Jul 2024 06:30:35 GMT

lollms <9.5.1, fixed in 9.5.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-38806: UAA Failure to Remove Shadow User’s Access

Thu, 18 Jul 2024 18:41:33 GMT

CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Apollo Router vulnerable to Critical Regression In Query Plan Cache

Thu, 02 May 2024 08:20:00 GMT

apollo-router >=1.44.0, <1.45.1, fixed in 1.45.1. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-30246: Tuleap deleting or moving an artifact can delete values from unrelated artifacts

Fri, 29 Mar 2024 15:50:19 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6129: POLY1305 MAC implementation corrupts vector registers on PowerPC

Tue, 09 Jan 2024 16:36:58 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4807: POLY1305 MAC implementation corrupts XMM registers on Windows

Fri, 08 Sep 2023 11:01:53 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

sweetalert2 contains potentially undesirable behavior

Mon, 10 Jul 2023 19:08:10 GMT

sweetalert2 >=11.6.14, <11.22.4, fixed in 11.22.4. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

gRPC connection termination issue

Thu, 06 Jul 2023 21:15:08 GMT

io.grpc:grpc-protobuf >=1.53.0, <1.53.1 || >=1.54.0, <1.54.2, fixed in 1.53.1, 1.54.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Connection confusion in gRPC

Wed, 05 Jul 2023 19:12:51 GMT

io.grpc:grpc-protobuf >=1.53.0, <1.53.1 || >=1.54.0, <1.54.2, fixed in 1.53.1, 1.54.2. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-2088: A flaw was found in OpenStack due to an inconsistency between Cinder and Nova.

Fri, 12 May 2023 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-3344: A flaw was found in the KVM's AMD nested virtualization (SVM).

Mon, 24 Oct 2022 00:00:00 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-3281: WAGO: multiple products - Loss of MAC-Address-Filtering after reboot

Mon, 17 Oct 2022 08:20:12 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Expected Behavior Violation in Apache Tomcat

Fri, 13 May 2022 01:46:13 GMT

org.apache.tomcat.embed:tomcat-embed-core >=9.0.0.M1, <9.0.0.M19 || >=8.5.0, <8.5.13, fixed in 9.0.0.M19, 8.5.13. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-41035: Execution with unnecessary privileges in The Eclipse Foundation Eclipse OMR

Mon, 25 Oct 2021 15:05:11 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-10768: kernel: A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function…

Tue, 15 Sep 2020 23:13:30 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-10767: kernel: A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced…

Tue, 15 Sep 2020 22:14:41 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-10766: A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD.

Tue, 15 Sep 2020 22:10:27 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3.

Mon, 23 Dec 2019 18:55:05 GMT

CVSS 7.4 (High). Critical: CVSS score 7.4 (7.0 or more) and EPSS 0.10 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.