agentprime: CWE-525

CVE-2026-114542: Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Fri, 30 Oct 2026 03:09:26 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114546: Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Fri, 30 Oct 2026 03:09:23 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114548: ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247

Fri, 30 Oct 2026 03:09:21 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118550: AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Fri, 30 Oct 2026 03:08:56 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118571: Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292

Fri, 30 Oct 2026 03:08:33 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87940: Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138

Thu, 22 Oct 2026 01:22:02 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96369: Webform - Less critical - Access bypass - SA-CONTRIB-2026-165

Thu, 22 Oct 2026 01:21:41 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4405: IBM Concert Software Use of Web Browser Cache Containing Sensitive Information

Mon, 19 Oct 2026 17:17:27 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

Mon, 03 Aug 2026 19:19:47 GMT

undici >=7.0.0, <7.29.0 || >=8.0.0, <8.9.0, fixed in 7.29.0, 8.9.0. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-23571: HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since the application does not have an…

Fri, 17 Jul 2026 13:42:48 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store

Fri, 12 Jun 2026 18:30:09 GMT

github.com/juev/nebula-mesh <0.3.2, fixed in 0.3.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-41918: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).

Tue, 02 Jun 2026 12:06:50 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

Thu, 23 Apr 2026 14:36:03 GMT

@astrojs/node <10.0.5, fixed in 10.0.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-15554: Admin Passwords Cached by Browsers in Truesec LAPSWebUI

Mon, 16 Mar 2026 10:46:09 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36364: IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.

Tue, 03 Mar 2026 19:43:12 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-27514: Tenda F3 Plaintext Credential Exposure in Configuration Download

Mon, 23 Feb 2026 16:27:38 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24437: Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

Mon, 26 Jan 2026 17:40:22 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52659: HCL AION is affected by a Cacheable HTTP Response vulnerability

Mon, 19 Jan 2026 17:54:19 GMT

CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels

Tue, 18 Nov 2025 18:32:53 GMT

drupal/core >=7.0, <7.103 || >=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8, fixed in 7.103, 10.4.9, 10.5.6, 11.1.9, 11.2.8. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Liferay Portal and DXP use an incorrect cache-control header

Sat, 01 Nov 2025 00:30:27 GMT

com.liferay:com.liferay.adaptive.media.web <5.0.52, fixed in 5.0.52. CVSS 4.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-52625: HCL AION is susceptible to Cacheable SSL Page Found vulnerability

Fri, 10 Oct 2025 10:28:53 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36082: IBM OpenPages information disclosure

Mon, 15 Sep 2025 15:31:45 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Better Call routing bug can lead to Cache Deception

Fri, 11 Jul 2025 17:09:53 GMT

better-call <1.0.12, fixed in 1.0.12. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-1348: IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

Wed, 18 Jun 2025 16:19:48 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies

Wed, 04 Jun 2025 21:24:52 GMT

@auth0/nextjs-auth0 >=4.0.1, <4.6.1, fixed in 4.6.1. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-1334: IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure

Tue, 03 Jun 2025 15:18:40 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27525: Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager

Thu, 15 May 2025 06:45:58 GMT

CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-43035: IBM Sterling Control Center information disclosure

Thu, 10 Apr 2025 13:26:44 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31906: IBM Automation Decision Services information disclosure

Sun, 26 Jan 2025 14:36:29 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-22349: IBM UrbanCode Velocity information disclosure

Mon, 20 Jan 2025 17:42:37 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Flask-AppBuilder's login form allows browser to cache sensitive fields

Wed, 04 Sep 2024 18:12:16 GMT

flask-appbuilder <4.5.1, fixed in 4.5.1. CVSS 3.6 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-30130: HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

Fri, 19 Jul 2024 00:03:13 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-38383: IBM Cloud Pak for Security information disclosure

Fri, 28 Jun 2024 19:03:43 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Apache Airflow does not return the "Cache-Control" header for dynamic content

Fri, 14 Jun 2024 09:31:17 GMT

apache-airflow <2.9.2, fixed in 2.9.2. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-22333: IBM Maximo Application Suite information disclosure

Thu, 13 Jun 2024 13:55:39 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-43841: IBM Aspera Console information disclosure

Thu, 30 May 2024 11:45:55 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-22343: IBM TXSeries for Multiplatforms information disclosure

Fri, 10 May 2024 17:29:21 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-46181: IBM Secure Proxy information disclosure

Fri, 15 Mar 2024 15:13:49 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-27545: IBM Watson CloudPak for Data Data Stores information disclosure

Thu, 29 Feb 2024 00:45:45 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-23469: IBM Cloud Pak for Business Automation information disclosure

Wed, 01 Feb 2023 18:12:22 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Rack-Cache caches sensitive headers

Tue, 17 May 2022 05:05:40 GMT

rack-cache >=0.3.0, <1.2, fixed in 1.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-42015: Siemens Mendix Applications using Mendix 7: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions <…

Tue, 09 Nov 2021 11:32:14 GMT

Published by the CVE Program. Not analysed by agentprime yet.

Cache Manipulation Attack in Apache Traffic Control

Fri, 18 Jun 2021 22:04:32 GMT

github.com/apache/trafficcontrol <5.0.0, fixed in 5.0.0. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.