# CWE-64.

Every Advisory and CVE whose sources give the weakness CWE-64, newest first.

## Records, newest first

- [Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS](https://agentprime.io/advisories/CVE-2025-7376.md)
  `CVE-2025-7376` · CVE record: Mitsubishi Electric Corporation GENESIS64 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-64
- [Trend Micro, Inc. Trend Micro Cleaner One Pro: Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that…](https://agentprime.io/advisories/CVE-2025-53503.md)
  `CVE-2025-53503` · CVE record: Trend Micro, Inc. Trend Micro Cleaner One Pro · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-64
- [Trend Micro, Inc. Trend Micro Password Manager: Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a…](https://agentprime.io/advisories/CVE-2025-52837.md)
  `CVE-2025-52837` · CVE record: Trend Micro, Inc. Trend Micro Password Manager · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-64
- [Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro file…](https://agentprime.io/advisories/CVE-2025-52521.md)
  `CVE-2025-52521` · CVE record: Trend Micro, Inc. Trend Micro Security (Consumer) · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-64
- [Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro file…](https://agentprime.io/advisories/CVE-2025-49385.md)
  `CVE-2025-49385` · CVE record: Trend Micro, Inc. Trend Micro Internet Security (Consumer) · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-64
- [Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro file…](https://agentprime.io/advisories/CVE-2025-49384.md)
  `CVE-2025-49384` · CVE record: Trend Micro, Inc. Trend Micro Internet Security (Consumer) · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-64
- [Trend Micro, Inc. Trend Micro Password Manager: Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a…](https://agentprime.io/advisories/CVE-2025-48443.md)
  `CVE-2025-48443` · CVE record: Trend Micro, Inc. Trend Micro Password Manager · CVSS 6.7 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-64
- [Deletion of arbitrary files vulnerability in Snow Agent for Windows](https://agentprime.io/advisories/CVE-2021-41562.md)
  `CVE-2021-41562` · CVE record: Snow Snow Agent for Windows · CVSS 6.1 Medium · Not analysed yet · Published 3 Nov 2021 · Tags: CWE-64
- [Cross-site scripting vulnerability in TinyMCE plugins](https://agentprime.io/advisories/GHSA-r8hm-w5f7-wj39.md)
  `GHSA-r8hm-w5f7-wj39`, `CVE-2024-21910`, `PKSA-s6b9-gg3t-crbs`, `PYSEC-2026-632` · npm `tinymce` and 3 more: affected `<5.10.0`, fixed in `5.10.0` · CVSS 6.1 Medium · Not analysed yet · Published 2 Nov 2021 · Tags: Cross-site scripting (XSS), CWE-64
- [Cross-site Scripting in Beego](https://agentprime.io/advisories/GHSA-c77f-4rgj-jfr4.md)
  `GHSA-c77f-4rgj-jfr4`, `CVE-2021-39391` · Go `github.com/beego/beego/v2`: affected `<2.0.2`, fixed in `2.0.2` · CVSS 6.1 Medium · Not analysed yet · Published 15 Sept 2021 · Tags: Cross-site scripting (XSS), CWE-64
- [Duo Authentication Proxy Installer Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1492.md)
  `CVE-2021-1492` · CVE record: Cisco Duo Authentication Proxy · CVSS 6.6 Medium · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-64
- [Cross-Site Scripting in jquery](https://agentprime.io/advisories/GHSA-2pqj-h3vj-pqgw.md)
  `GHSA-2pqj-h3vj-pqgw`, `CVE-2012-6708` · Maven `org.webjars.npm:jquery` and 3 more: affected `<1.9.0`, fixed in `1.9.0` · CVSS 6.1 Medium · Not analysed yet · Published 1 Sept 2020 · Tags: Cross-site scripting (XSS), CWE-64
- [Cross-Site Scripting in bootbox](https://agentprime.io/advisories/GHSA-87mg-h5r3-hw88.md)
  `GHSA-87mg-h5r3-hw88` · npm `bootbox`: affected `<=5.5.2`, no fixed version yet · No CVSS score · Not analysed yet · Published 30 May 2019 · Tags: Cross-site scripting (XSS), CWE-64
- [Cross-Site Scripting in html-pages](https://agentprime.io/advisories/GHSA-5p26-hw7f-3cpr.md)
  `GHSA-5p26-hw7f-3cpr`, `CVE-2018-16481` · npm `html-pages`: affected `<=3.1.0`, no fixed version yet · CVSS 6.1 Medium · Not analysed yet · Published 7 Feb 2019 · Tags: Cross-site scripting (XSS), CWE-64

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-64>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-64/>. Everything for agents: <https://agentprime.io/llms.txt>.