<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-477</title><description>Every new CWE-477 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-1693: Use of vulnerable Resource Owner Password Credentials flow</title><link>https://agentprime.io/advisories/CVE-2026-1693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1693/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Feb 2026 07:56:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49217: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.</title><link>https://agentprime.io/advisories/CVE-2025-49217/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49217/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 20:28:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-49216: An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected…</title><link>https://agentprime.io/advisories/CVE-2025-49216/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49216/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 20:28:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-49214: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations.</title><link>https://agentprime.io/advisories/CVE-2025-49214/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49214/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 20:27:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49213: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.</title><link>https://agentprime.io/advisories/CVE-2025-49213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49213/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 20:27:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-49212: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.</title><link>https://agentprime.io/advisories/CVE-2025-49212/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49212/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 20:27:37 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-49220: Trend Micro, Inc. Trend Micro Apex Central: An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007…</title><link>https://agentprime.io/advisories/CVE-2025-49220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49220/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 17:43:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-49219: Trend Micro, Inc. Trend Micro Apex Central: An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007…</title><link>https://agentprime.io/advisories/CVE-2025-49219/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49219/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 17:43:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Insecure plugin handling in Mattermost in github.com/mattermost/mattermost-server</title><link>https://agentprime.io/advisories/GHSA-32rp-q37p-jg6w/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-32rp-q37p-jg6w/</guid><description>github.com/mattermost/mattermost-server *, no fixed version yet. CVSS 4.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 15:11:38 GMT</pubDate><category>Go</category><category>github.com/mattermost/mattermost-server</category><category>github.com/mattermost/mattermost-server/v5</category><category>github.com/mattermost/mattermost-server/v6</category></item><item><title>CVE-2023-28829: Siemens SIMATIC NET PC Software V14: A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions)…</title><link>https://agentprime.io/advisories/CVE-2023-28829/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28829/</guid><description>CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jun 2023 08:17:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23451: The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number &lt;=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number &lt;=2311xxxx…</title><link>https://agentprime.io/advisories/CVE-2023-23451/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23451/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Apr 2023 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2020-6978: Honeywell WIN-PAK 4.7.2, Web and prior versions: In Honeywell WIN-PAK 4.7.2, Web and prior versions…</title><link>https://agentprime.io/advisories/CVE-2020-6978/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6978/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Mar 2020 20:09:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-18251: Omron CX-Supervisor: In Omron CX-Supervisor, Versions 3.5 (12) and prior…</title><link>https://agentprime.io/advisories/CVE-2019-18251/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-18251/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Nov 2019 23:29:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-10988: Philips HDI 4000 Ultrasound Systems: In Philips HDI 4000 Ultrasound Systems, all versions running on old…</title><link>https://agentprime.io/advisories/CVE-2019-10988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-10988/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Sep 2019 13:36:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-10968: Philips Holter 2010 Plus, all versions.</title><link>https://agentprime.io/advisories/CVE-2019-10968/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-10968/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jul 2019 14:46:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-17890: NUUO CMS: NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software…</title><link>https://agentprime.io/advisories/CVE-2018-17890/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-17890/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Oct 2018 14:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>