agentprime: CWE-453Every new CWE-453 Advisory and CVE.https://agentprime.io/CVE-2026-103577: Microsoft QUIC Security Feature Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-103577/https://agentprime.io/advisories/CVE-2026-103577/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:01:36 GMTCVECVE-2026-109828: libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variablehttps://agentprime.io/advisories/CVE-2026-109828/https://agentprime.io/advisories/CVE-2026-109828/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:00:15 GMTCVEvm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scriptshttps://agentprime.io/advisories/GHSA-jxxv-8r27-vm4p/https://agentprime.io/advisories/GHSA-jxxv-8r27-vm4p/vm2 <3.11.7, fixed in 3.11.7. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:40:45 GMTnpmvm2criticalDuplicate Advisory: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scriptshttps://agentprime.io/advisories/GHSA-hc6q-4vvg-jf79/https://agentprime.io/advisories/GHSA-hc6q-4vvg-jf79/vm2 <=3.11.6, no fixed version yet. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 17 Sep 2026 15:32:16 GMTnpmvm2CVE-2026-19212: WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variablehttps://agentprime.io/advisories/CVE-2026-19212/https://agentprime.io/advisories/CVE-2026-19212/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:30:53 GMTCVECVE-2026-0082: In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value.https://agentprime.io/advisories/CVE-2026-0082/https://agentprime.io/advisories/CVE-2026-0082/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jun 2026 07:13:55 GMTCVEcriticalOpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controlshttps://agentprime.io/advisories/GHSA-9gp8-hjxr-6f34/https://agentprime.io/advisories/GHSA-9gp8-hjxr-6f34/openclaw <2026.3.31, fixed in 2026.3.31. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 02:57:00 GMTnpmopenclawAllstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret in github.com/ossf/allstarhttps://agentprime.io/advisories/GHSA-33f4-mjch-7fpr/https://agentprime.io/advisories/GHSA-33f4-mjch-7fpr/github.com/ossf/allstar <0.0.0-20250721181116-e004ecb540d6, fixed in 0.0.0-20250721181116-e004ecb540d6. CVSS 4.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 23 Oct 2025 16:25:09 GMTGogithub.com/ossf/allstarCVE-2025-48563: In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value.https://agentprime.io/advisories/CVE-2025-48563/https://agentprime.io/advisories/CVE-2025-48563/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Sep 2025 18:34:40 GMTCVECVE-2025-47945: Donetick Has Weak Default JWT Secrethttps://agentprime.io/advisories/CVE-2025-47945/https://agentprime.io/advisories/CVE-2025-47945/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 May 2025 18:36:11 GMTCVEcriticalDpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanelhttps://agentprime.io/advisories/GHSA-j752-cjcj-w847/https://agentprime.io/advisories/GHSA-j752-cjcj-w847/github.com/donknap/dpanel <1.6.1, fixed in 1.6.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 22 Apr 2025 16:56:33 GMTGogithub.com/donknap/dpanelcriticalCVE-2024-49120: Windows Remote Desktop Services Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-49120/https://agentprime.io/advisories/CVE-2024-49120/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 17:49:23 GMTCVEFilestash configured to skip TLS certificate verification when using the FTPS protocolhttps://agentprime.io/advisories/GHSA-4jmm-c6jw-g796/https://agentprime.io/advisories/GHSA-4jmm-c6jw-g796/github.com/mickael-kerjean/filestash <=0.4, no fixed version yet. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 31 Jul 2024 21:32:38 GMTGogithub.com/mickael-kerjean/filestashCVE-2024-39916: NFS server misconfiguration allows file access outside the exported directoryhttps://agentprime.io/advisories/CVE-2024-39916/https://agentprime.io/advisories/CVE-2024-39916/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jul 2024 15:00:10 GMTCVE fgr Vulnerable to Insecure Default Variable Initializationhttps://agentprime.io/advisories/GHSA-879p-8gw4-mcpw/https://agentprime.io/advisories/GHSA-879p-8gw4-mcpw/fgr <=0.3.2, no fixed version yet. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 15 Mar 2024 19:01:10 GMTPyPIfgrCVE-2024-21411: Skype for Consumer Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-21411/https://agentprime.io/advisories/CVE-2024-21411/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 16:57:42 GMTCVECVE-2023-27516: SoftEther VPN: An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of…https://agentprime.io/advisories/CVE-2023-27516/https://agentprime.io/advisories/CVE-2023-27516/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Oct 2023 15:27:52 GMTCVECVE-2022-47197: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47197/https://agentprime.io/advisories/CVE-2022-47197/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47196: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47196/https://agentprime.io/advisories/CVE-2022-47196/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47195: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47195/https://agentprime.io/advisories/CVE-2022-47195/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47194: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47194/https://agentprime.io/advisories/CVE-2022-47194/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:10 GMTCVEcriticalCVE-2022-46831: JetBrains TeamCity: In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default…https://agentprime.io/advisories/CVE-2022-46831/https://agentprime.io/advisories/CVE-2022-46831/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Dec 2022 17:38:04 GMTCVECVE-2022-3262: A flaw was found in Openshift.https://agentprime.io/advisories/CVE-2022-3262/https://agentprime.io/advisories/CVE-2022-3262/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Dec 2022 00:00:00 GMTCVEDotNetNuke Default Machine Key Exposurehttps://agentprime.io/advisories/GHSA-grw3-hjjm-5cjm/https://agentprime.io/advisories/GHSA-grw3-hjjm-5cjm/DotNetNuke.Core <4.8.2, fixed in 4.8.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sat, 14 May 2022 02:38:47 GMTNuGetDotNetNuke.CoreCVE-2021-27426: GE UR family insecure default variable initializationhttps://agentprime.io/advisories/CVE-2021-27426/https://agentprime.io/advisories/CVE-2021-27426/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Mar 2022 19:46:27 GMTCVEcriticalCORS misconfiguration in socket.iohttps://agentprime.io/advisories/GHSA-fxwf-4rqh-v8g3/https://agentprime.io/advisories/GHSA-fxwf-4rqh-v8g3/socket.io <2.4.0, fixed in 2.4.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 20 Jan 2021 21:22:37 GMTnpmsocket.io