agentprime: CWE-547

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

Mon, 11 May 2026 14:42:46 GMT

keylime >=7.14.0, <7.14.2, fixed in 7.14.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-28256: Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

Thu, 12 Mar 2026 17:34:56 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-49151: Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+

Wed, 25 Jun 2025 16:32:30 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-23253: NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path.

Tue, 22 Apr 2025 18:45:57 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Tue, 22 Apr 2025 16:56:33 GMT

github.com/donknap/dpanel <1.6.1, fixed in 1.6.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-2081: Use of Hard-Coded, Security-Relevant Constants

Thu, 13 Mar 2025 17:00:03 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2079: Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

Thu, 13 Mar 2025 16:55:27 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-41885: Hardcoding sensitive information

Tue, 24 Dec 2024 05:27:39 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-39888: A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2).

Tue, 09 Jul 2024 12:05:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-32021: Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

Tue, 14 May 2024 19:15:28 GMT

CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Use of hard-coded, security-relevant constants in deepset-ai/haystack

Thu, 30 Mar 2023 12:30:15 GMT

farm-haystack <=1.15.0, no fixed version yet. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

keycloak vulnerable to unauthorized login via mail server setup

Tue, 24 May 2022 17:05:43 GMT

org.keycloak:keycloak-core <8.0.0, fixed in 8.0.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Bypassing Sanitization using DOM clobbering in html-janitor

Tue, 24 Jul 2018 20:06:17 GMT

html-janitor *, no fixed version yet. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.