agentprime: CWE-602Every new CWE-602 Advisory and CVE.https://agentprime.io/CVE-2026-122148: Yealink MeetingBoard Pro: In Yealink MeetingBoard Pro before 331.320.0.64…https://agentprime.io/advisories/CVE-2026-122148/https://agentprime.io/advisories/CVE-2026-122148/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:22:44 GMTCVECVE-2026-119746: ProSoft ICX35 Login Lockout Bypass via Client-Side Cookieshttps://agentprime.io/advisories/CVE-2026-119746/https://agentprime.io/advisories/CVE-2026-119746/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:39:12 GMTCVECVE-2026-89293: Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tamperinghttps://agentprime.io/advisories/CVE-2026-89293/https://agentprime.io/advisories/CVE-2026-89293/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:38:23 GMTCVECVE-2026-117554: Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.phphttps://agentprime.io/advisories/CVE-2026-117554/https://agentprime.io/advisories/CVE-2026-117554/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 13:07:50 GMTCVECVE-2026-116605: SourceCodester Online Food Ordering System order.php client-side enforcement of server-side securityhttps://agentprime.io/advisories/CVE-2026-116605/https://agentprime.io/advisories/CVE-2026-116605/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:00:20 GMTCVEWebSocket frames keep reaching the WebSock after a server-initiated close in Bandithttps://agentprime.io/advisories/GHSA-2v5v-8f9v-xh85/https://agentprime.io/advisories/GHSA-2v5v-8f9v-xh85/bandit >=0.5.1, <1.14.0, fixed in 1.14.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 26 Oct 2026 13:31:18 GMTHexbanditCVE-2026-89206: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).https://agentprime.io/advisories/CVE-2026-89206/https://agentprime.io/advisories/CVE-2026-89206/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 09:19:10 GMTCVECVE-2026-89205: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).https://agentprime.io/advisories/CVE-2026-89205/https://agentprime.io/advisories/CVE-2026-89205/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 09:19:09 GMTCVECVE-2026-13138: Improper Authorization in Divasoft Software's Biletiva Ticketing Platformhttps://agentprime.io/advisories/CVE-2026-13138/https://agentprime.io/advisories/CVE-2026-13138/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 08:37:46 GMTCVECVE-2026-100306: TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcementhttps://agentprime.io/advisories/CVE-2026-100306/https://agentprime.io/advisories/CVE-2026-100306/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:47:40 GMTCVECVE-2026-77320: TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)https://agentprime.io/advisories/CVE-2026-77320/https://agentprime.io/advisories/CVE-2026-77320/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:05:13 GMTCVECVE-2026-82189: Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-82189/https://agentprime.io/advisories/CVE-2026-82189/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:46:54 GMTCVECVE-2026-54047: Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulationhttps://agentprime.io/advisories/CVE-2026-54047/https://agentprime.io/advisories/CVE-2026-54047/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 16:23:48 GMTCVEcriticalCVE-2026-89175: Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authenticationhttps://agentprime.io/advisories/CVE-2026-89175/https://agentprime.io/advisories/CVE-2026-89175/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 07:34:04 GMTCVECVE-2026-77999: Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-77999/https://agentprime.io/advisories/CVE-2026-77999/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:58:00 GMTCVECVE-2026-84841: tsi-coop tsi-dpdp-cms client-side enforcement of server-side securityhttps://agentprime.io/advisories/CVE-2026-84841/https://agentprime.io/advisories/CVE-2026-84841/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 18:45:10 GMTCVECVE-2026-77793: RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Fieldhttps://agentprime.io/advisories/CVE-2026-77793/https://agentprime.io/advisories/CVE-2026-77793/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 14:16:49 GMTCVECVE-2026-84110: Releasit Releasit COD Form & Upsells OTP Validation client-side enforcement of server-side securityhttps://agentprime.io/advisories/CVE-2026-84110/https://agentprime.io/advisories/CVE-2026-84110/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 14:15:08 GMTCVEStarlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoShttps://agentprime.io/advisories/GHSA-6753-gr46-6wpr/https://agentprime.io/advisories/GHSA-6753-gr46-6wpr/starlette-admin <0.16.1, fixed in 0.16.1. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 26 Aug 2026 14:14:37 GMTPyPIstarlette-adminCVE-2026-73267: Clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership checkhttps://agentprime.io/advisories/CVE-2026-73267/https://agentprime.io/advisories/CVE-2026-73267/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 02:43:36 GMTCVECVE-2026-77026: Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 1.0.0-4.4.16, 5.0.0-5.2.5https://agentprime.io/advisories/CVE-2026-77026/https://agentprime.io/advisories/CVE-2026-77026/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:35:55 GMTCVECVE-2026-45274: MyBooks: Unauthenticated Registration Bypass via Missing Server-Side ALLOW_REGISTER Enforcementhttps://agentprime.io/advisories/CVE-2026-45274/https://agentprime.io/advisories/CVE-2026-45274/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:38:58 GMTCVECVE-2026-67363: Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2https://agentprime.io/advisories/CVE-2026-67363/https://agentprime.io/advisories/CVE-2026-67363/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:00:45 GMTCVECVE-2026-59504: Priority – CWE-602: Client-Side Enforcement of Server-Side Securityhttps://agentprime.io/advisories/CVE-2026-59504/https://agentprime.io/advisories/CVE-2026-59504/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 09:33:50 GMTCVEcriticalCVE-2026-16480: IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.https://agentprime.io/advisories/CVE-2026-16480/https://agentprime.io/advisories/CVE-2026-16480/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 20:49:02 GMTCVECVE-2026-65938: WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.https://agentprime.io/advisories/CVE-2026-65938/https://agentprime.io/advisories/CVE-2026-65938/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:22:44 GMTCVECVE-2026-72867: Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)https://agentprime.io/advisories/CVE-2026-72867/https://agentprime.io/advisories/CVE-2026-72867/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:36:54 GMTCVEcriticalCVE-2026-14831: Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypasshttps://agentprime.io/advisories/CVE-2026-14831/https://agentprime.io/advisories/CVE-2026-14831/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:04:20 GMTCVECVE-2026-17985: Google Chrome: Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed…https://agentprime.io/advisories/CVE-2026-17985/https://agentprime.io/advisories/CVE-2026-17985/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:25:55 GMTCVECVE-2026-17974: Google Chrome: Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72…https://agentprime.io/advisories/CVE-2026-17974/https://agentprime.io/advisories/CVE-2026-17974/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:25:50 GMTCVECVE-2026-17960: Google Chrome: Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to…https://agentprime.io/advisories/CVE-2026-17960/https://agentprime.io/advisories/CVE-2026-17960/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:25:44 GMTCVECVE-2026-17953: Google Chrome: Insufficient policy enforcement in WebView in Google Chrome on Android prior to…https://agentprime.io/advisories/CVE-2026-17953/https://agentprime.io/advisories/CVE-2026-17953/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:25:41 GMTCVECVE-2026-17821: Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72…https://agentprime.io/advisories/CVE-2026-17821/https://agentprime.io/advisories/CVE-2026-17821/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:19:30 GMTCVECVE-2026-17813: Google Chrome: Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to…https://agentprime.io/advisories/CVE-2026-17813/https://agentprime.io/advisories/CVE-2026-17813/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:19:28 GMTCVECVE-2026-17805: Google Chrome: Insufficient policy enforcement in Glic in Google Chrome on Android prior to…https://agentprime.io/advisories/CVE-2026-17805/https://agentprime.io/advisories/CVE-2026-17805/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:19:26 GMTCVECVE-2026-17756: Google Chrome: Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72…https://agentprime.io/advisories/CVE-2026-17756/https://agentprime.io/advisories/CVE-2026-17756/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:19:12 GMTCVECVE-2026-17703: Google Chrome: Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to…https://agentprime.io/advisories/CVE-2026-17703/https://agentprime.io/advisories/CVE-2026-17703/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 00:18:58 GMTCVECVE-2026-63301: Denial of Service in Quick.CMShttps://agentprime.io/advisories/CVE-2026-63301/https://agentprime.io/advisories/CVE-2026-63301/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 10:42:56 GMTCVECVE-2026-64813: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible…https://agentprime.io/advisories/CVE-2026-64813/https://agentprime.io/advisories/CVE-2026-64813/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 11:36:59 GMTCVEcriticalJupyterLab PluginManager lock-rule enforcement bypasshttps://agentprime.io/advisories/GHSA-h5v5-8746-g7mm/https://agentprime.io/advisories/GHSA-h5v5-8746-g7mm/jupyterlab >=4.1.0, <4.5.10 || >=4.6.0, <4.6.2, fixed in 4.5.10, 4.6.2. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 22 Jul 2026 23:13:34 GMTPyPIjupyterlabCVE-2026-65051: Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handlerhttps://agentprime.io/advisories/CVE-2026-65051/https://agentprime.io/advisories/CVE-2026-65051/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 14:31:55 GMTCVECVE-2026-13724: Business Logic Bypass in Gobito's Corporate Training Management Systemhttps://agentprime.io/advisories/CVE-2026-13724/https://agentprime.io/advisories/CVE-2026-13724/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:32:09 GMTCVECVE-2026-46485: Dash: Users can write to config despire permissions (OIDC tested)https://agentprime.io/advisories/CVE-2026-46485/https://agentprime.io/advisories/CVE-2026-46485/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 18:08:48 GMTCVECVE-2026-15130: Google Chrome: Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115…https://agentprime.io/advisories/CVE-2026-15130/https://agentprime.io/advisories/CVE-2026-15130/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 22:36:05 GMTCVECVE-2026-14109: Google Chrome: Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a…https://agentprime.io/advisories/CVE-2026-14109/https://agentprime.io/advisories/CVE-2026-14109/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:30 GMTCVEcriticalCVE-2026-14086: Google Chrome: Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a…https://agentprime.io/advisories/CVE-2026-14086/https://agentprime.io/advisories/CVE-2026-14086/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:22 GMTCVECVE-2026-14081: Google Chrome: Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47…https://agentprime.io/advisories/CVE-2026-14081/https://agentprime.io/advisories/CVE-2026-14081/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:20 GMTCVECVE-2026-14075: Google Chrome: Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to…https://agentprime.io/advisories/CVE-2026-14075/https://agentprime.io/advisories/CVE-2026-14075/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:18 GMTCVECVE-2026-14054: Google Chrome: Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47…https://agentprime.io/advisories/CVE-2026-14054/https://agentprime.io/advisories/CVE-2026-14054/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:10 GMTCVECVE-2026-14047: Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47…https://agentprime.io/advisories/CVE-2026-14047/https://agentprime.io/advisories/CVE-2026-14047/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:08 GMTCVE