agentprime: CWE-592

Apache Tomcat - Digest authenticator will authenticate any unknown user

Tue, 12 May 2026 18:30:38 GMT

org.apache.tomcat.embed:tomcat-embed-core <9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22, fixed in 9.0.118, 10.1.55, 11.0.22. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-30971: Gaia unauthenticated endpoints

Fri, 19 Dec 2025 16:34:19 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-42759: An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.

Mon, 09 Sep 2024 00:00:00 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38884: An issue in Horizon Business Services Inc.

Fri, 02 Aug 2024 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak Authentication Error

Tue, 24 May 2022 17:02:42 GMT

org.keycloak:keycloak-parent >=7.0.0, <=7.0.1, no fixed version yet. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Keycloak Authentication Error

Tue, 24 May 2022 17:02:40 GMT

Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass

Fri, 13 May 2022 01:36:51 GMT

cprice404:pipeline-classpath =0.1.0, no fixed version yet. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Privilege Escalation in Hibernate Validator

Mon, 15 Jun 2020 19:57:48 GMT

org.hibernate:hibernate-validator >=5.2.0, <5.2.5.Final || >=5.3.0, <5.3.6.Final || >=5.4.0, <5.4.2.Final, fixed in 5.2.5.Final, 5.3.6.Final, 5.4.2.Final. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-14843: A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester.

Tue, 07 Jan 2020 16:34:59 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Improper Verification of Cryptographic Signature in keycloak

Mon, 23 Sep 2019 18:32:16 GMT

org.keycloak:keycloak-core <7.0.0, fixed in 7.0.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-10198: An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7.

Wed, 31 Jul 2019 21:44:19 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-3899: heketi: It was found that default configuration of Heketi does not require any authentication…

Mon, 22 Apr 2019 15:20:07 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2014-5432: Baxter SIGMA Spectrum Infusion System: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery…

Tue, 26 Mar 2019 15:17:16 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-10933: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.

Wed, 17 Oct 2018 12:00:00 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

Mon, 08 Oct 2018 23:18:13 GMT

smart_proxy_dynflow <0.1.11 || >=0.2.0, <0.2.1, fixed in 0.1.11, 0.2.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2016-8616: curl: A flaw was found in curl before version 7.51.0 When re-using a connection…

Wed, 01 Aug 2018 06:00:00 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-10847: prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass.

Mon, 30 Jul 2018 16:00:00 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-12164: GNOME gdm: A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once…

Thu, 26 Jul 2018 16:00:00 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-7537: Dogtag PKI pki-core: It was found that a mock CMC authentication plugin with a hardcoded secret was…

Thu, 26 Jul 2018 13:00:00 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-1085: [UNKNOWN] openshift-ansible: openshift-ansible before versions 3.9.23…

Fri, 15 Jun 2018 13:00:00 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2016-8371: Phoenix Contact ILC PLCs: The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if…

Thu, 05 Apr 2018 16:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-2684: Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level au…

Wed, 22 Feb 2017 02:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2014-2367: Advantech WebAccess Authentication Bypass Issues

Sat, 19 Jul 2014 01:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2012-4688: I-GEN opLYNX Central Authentication Bypass

Mon, 31 Dec 2012 11:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.