<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-539</title><description>Every new CWE-539 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Django Uses Persistent Cookies Containing Sensitive Information </title><link>https://agentprime.io/advisories/GHSA-7h2m-m8vj-598h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7h2m-m8vj-598h/</guid><description>django &gt;=5.2, &lt;5.2.14 || &gt;=6.0, &lt;6.0.5, fixed in 5.2.14, 6.0.5. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 18:33:24 GMT</pubDate><category>PyPI</category><category>django</category></item><item><title>CVE-2026-24318: Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform</title><link>https://agentprime.io/advisories/CVE-2026-24318/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24318/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Apr 2026 00:06:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52633: HCL AION is susceptible to Missing Content-Security-Policy</title><link>https://agentprime.io/advisories/CVE-2025-52633/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52633/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27673: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.</title><link>https://agentprime.io/advisories/CVE-2025-27673/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27673/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Mar 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-39275: Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information</title><link>https://agentprime.io/advisories/CVE-2024-39275/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39275/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Sep 2024 17:38:20 GMT</pubDate><category>CVE</category></item><item><title>Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header</title><link>https://agentprime.io/advisories/GHSA-m2qf-hxjv-5gpq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-m2qf-hxjv-5gpq/</guid><description>flask &lt;2.2.5 || &gt;=2.3.0, &lt;2.3.2, fixed in 2.2.5, 2.3.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 01 May 2023 19:22:20 GMT</pubDate><category>PyPI</category><category>flask</category></item><item><title>CVE-2021-27463: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.</title><link>https://agentprime.io/advisories/CVE-2021-27463/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-27463/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 May 2021 11:05:42 GMT</pubDate><category>CVE</category></item></channel></rss>