agentprime: CWE-523

CVE-2026-113866: Account password sent unencrypted during Exchange account setup

Tue, 20 Oct 2026 19:14:54 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17620: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Tue, 22 Sep 2026 21:28:16 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56587: HCL IEM was affected with Strict transport security not enforced

Tue, 21 Jul 2026 14:36:53 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

Fri, 19 Jun 2026 20:47:17 GMT

CoreWCF.Primitives >=1.9.0, <1.9.1, fixed in 1.9.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-8668: Hardcoded credentials in embedded content

Thu, 18 Jun 2026 21:19:18 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-36610: Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.

Wed, 03 Jun 2026 00:00:00 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8673: Password re-initialization mechanism sends passwords in plain text

Fri, 22 May 2026 13:18:16 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23635: Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

Wed, 25 Mar 2026 16:57:19 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Spinnaker vulnerable to SSRF due to improper restrictions on http from user input

Mon, 05 Jan 2026 22:55:12 GMT

io.spinnaker.clouddriver:clouddriver-artifacts <2025.1.6 || >=2025.2.0, <2025.2.3, fixed in 2025.1.6, 2025.2.3. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-66029: Open OnDemand affected by Apache proxy passing sensitive headers

Wed, 17 Dec 2025 22:32:51 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-64309: Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

Fri, 14 Nov 2025 23:41:18 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-64308: Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

Fri, 14 Nov 2025 23:38:48 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-61121: Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage vulnerability.

Thu, 30 Oct 2025 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-41705: Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials

Tue, 14 Oct 2025 08:05:43 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57800: Audiobookshelf vulnerable to OIDC token exfiltration and account takeover

Fri, 22 Aug 2025 17:02:04 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-1509: Brocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100

Fri, 28 Feb 2025 21:52:33 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4188: Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.

Tue, 30 Jul 2024 14:35:09 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-20395: A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information.

Wed, 17 Jul 2024 16:32:07 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Jberet: jberet-core logging database credentials

Thu, 25 Apr 2024 18:30:39 GMT

org.jberet:jberet-core <2.2.1.Final, fixed in 2.2.1.Final. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-31277: PiiGAB M-Bus Unprotected Transport of Credentials

Thu, 06 Jul 2023 22:56:10 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-22862: IBM Aspera information disclosure

Sun, 04 Jun 2023 23:42:57 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Apache Tomcat vulnerable to Unprotected Transport of Credentials

Wed, 22 Mar 2023 12:30:16 GMT

org.apache.tomcat:tomcat-catalina >=11.0.0-M1, <11.0.0-M3 || >=10.1.0-M1, <10.1.6 || >=9.0.0-M1, <9.0.72 || >=8.5.0, <8.5.86, fixed in 11.0.0-M3, 10.1.6, 9.0.72, 8.5.86. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-31805: Insecure transmission of credentials

Fri, 24 Jun 2022 07:46:15 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-38460: Moxa MXview Network Management Software

Tue, 12 Oct 2021 13:38:11 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-32003: Configuration service port remains open 10 minutes after reboot even when already provisioned

Thu, 05 Aug 2021 20:33:30 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-25175: GE Healthcare Imaging and Ultrasound Products: GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be…

Mon, 14 Dec 2020 16:36:24 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-16731: ABB Ellipse: An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through…

Wed, 20 Dec 2017 19:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.