agentprime: CWE-616Every new CWE-616 Advisory and CVE.https://agentprime.io/CVE-2026-105630: Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)https://agentprime.io/advisories/CVE-2026-105630/https://agentprime.io/advisories/CVE-2026-105630/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:54:01 GMTCVECVE-2026-67198: Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcherhttps://agentprime.io/advisories/CVE-2026-67198/https://agentprime.io/advisories/CVE-2026-67198/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 14:04:00 GMTCVECVE-2025-67084: File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Exe…https://agentprime.io/advisories/CVE-2025-67084/https://agentprime.io/advisories/CVE-2025-67084/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Jan 2026 00:00:00 GMTCVEcriticalCVE-2026-22789: WebErpMesv2 has a File Upload Validation Bypass Leading to RCEhttps://agentprime.io/advisories/CVE-2026-22789/https://agentprime.io/advisories/CVE-2026-22789/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jan 2026 21:52:11 GMTCVECVE-2025-59402: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode.https://agentprime.io/advisories/CVE-2025-59402/https://agentprime.io/advisories/CVE-2025-59402/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 00:00:00 GMTCVECVE-2025-52130: File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller.https://agentprime.io/advisories/CVE-2025-52130/https://agentprime.io/advisories/CVE-2025-52130/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Aug 2025 00:00:00 GMTCVEUnoPim Stored XSS : Cookie hijacking through Create User functionhttps://agentprime.io/advisories/GHSA-cgr4-c233-h733/https://agentprime.io/advisories/GHSA-cgr4-c233-h733/unopim/unopim <0.1.5, fixed in 0.1.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 13 Nov 2024 18:37:15 GMTPackagistunopim/unopimCVE-2024-31601: An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v.https://agentprime.io/advisories/CVE-2024-31601/https://agentprime.io/advisories/CVE-2024-31601/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Apr 2024 00:00:00 GMTCVEcriticalCVE-2024-28520: File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.p…https://agentprime.io/advisories/CVE-2024-28520/https://agentprime.io/advisories/CVE-2024-28520/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 00:00:00 GMTCVECVE-2024-29858: In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.https://agentprime.io/advisories/CVE-2024-29858/https://agentprime.io/advisories/CVE-2024-29858/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Mar 2024 00:00:00 GMTCVEcriticalCVE-2023-38947: An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.https://agentprime.io/advisories/CVE-2023-38947/https://agentprime.io/advisories/CVE-2023-38947/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Aug 2023 00:00:00 GMTCVE