<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-642</title><description>Every new CWE-642 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-50053: Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters</title><link>https://agentprime.io/advisories/CVE-2026-50053/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50053/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 13:15:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84518: This issue was addressed through improved state management.</title><link>https://agentprime.io/advisories/CVE-2026-84518/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84518/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 20:51:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65355: An information disclosure issue was addressed with improved state management.</title><link>https://agentprime.io/advisories/CVE-2026-65355/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65355/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 20:48:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65352: An information disclosure issue was addressed with improved state management.</title><link>https://agentprime.io/advisories/CVE-2026-65352/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65352/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 20:48:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78655: Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session</title><link>https://agentprime.io/advisories/CVE-2026-78655/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78655/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 21:23:48 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor</title><link>https://agentprime.io/advisories/GHSA-h468-7pvh-8vr8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h468-7pvh-8vr8/</guid><description>org.apache.tomcat:tomcat &gt;=9.0.13, &lt;9.0.116 || &gt;=10.1.50, &lt;10.1.53 || &gt;=11.0.0-M1, &lt;11.0.20 || &gt;=8.5.38, &lt;=8.5.100 || &gt;=7.0.100, &lt;=7.0.109, fixed in 9.0.116, 10.1.53, 11.0.20. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Apr 2026 21:31:29 GMT</pubDate><category>Maven</category><category>org.apache.tomcat:tomcat</category><category>org.apache.tomcat:tomcat-tribes</category></item><item><title>OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution</title><link>https://agentprime.io/advisories/GHSA-rvqr-hrcc-j9vv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rvqr-hrcc-j9vv/</guid><description>openclaw &lt;2026.3.22, fixed in 2026.3.22. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 19:50:24 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>CVE-2025-26787: An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.</title><link>https://agentprime.io/advisories/CVE-2025-26787/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26787/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Dec 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49090: Matrix specification: The Matrix specification before 1.16 (i.e…</title><link>https://agentprime.io/advisories/CVE-2025-49090/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49090/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Oct 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Duplicate Advisory: Unauthenticated Nonce Increment in snow</title><link>https://agentprime.io/advisories/GHSA-97f8-h76h-f297/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-97f8-h76h-f297/</guid><description>snow &lt;0.9.5, fixed in 0.9.5. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Jul 2025 00:30:33 GMT</pubDate><category>crates.io</category><category>snow</category></item><item><title>CVE-2025-54566: QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency…</title><link>https://agentprime.io/advisories/CVE-2025-54566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54566/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Jul 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-8754: External Control of Critical State Data in GitLab</title><link>https://agentprime.io/advisories/CVE-2024-8754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8754/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 12 Sep 2024 17:02:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-22387: Gallagher Controller 6000 and Controller 7000: External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller…</title><link>https://agentprime.io/advisories/CVE-2024-22387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22387/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jul 2024 02:38:52 GMT</pubDate><category>CVE</category></item><item><title>Unauthenticated Nonce Increment in snow</title><link>https://agentprime.io/advisories/GHSA-7g9j-g5jg-3vv3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7g9j-g5jg-3vv3/</guid><description>snow &gt;=0.0.0-0, &lt;0.9.5, fixed in 0.9.5. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jan 2024 12:00:00 GMT</pubDate><category>crates.io</category><category>snow</category></item><item><title>CVE-2023-0575: Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2023-0575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0575/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Feb 2023 16:12:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-32859: A logic issue was addressed with improved state management.</title><link>https://agentprime.io/advisories/CVE-2022-32859/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-32859/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22154: Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS</title><link>https://agentprime.io/advisories/CVE-2022-22154/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22154/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jan 2022 00:20:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-27872: NETGEAR R7450: This vulnerability allows network-adjacent attackers to bypass authentication on affected…</title><link>https://agentprime.io/advisories/CVE-2020-27872/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-27872/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Feb 2021 16:45:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-26186: Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability.</title><link>https://agentprime.io/advisories/CVE-2020-26186/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-26186/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Jan 2021 18:55:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-1976: GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.</title><link>https://agentprime.io/advisories/CVE-2020-1976/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1976/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Feb 2020 22:57:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-9496: An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps</title><link>https://agentprime.io/advisories/CVE-2019-9496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-9496/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Apr 2019 13:31:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-15382: Cisco HyperFlex Software Static Signing Key Vulnerability</title><link>https://agentprime.io/advisories/CVE-2018-15382/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-15382/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Oct 2018 14:00:00 GMT</pubDate><category>CVE</category></item><item><title>Bypassing Sanitization using DOM clobbering in html-janitor</title><link>https://agentprime.io/advisories/GHSA-fx46-whrj-73v5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fx46-whrj-73v5/</guid><description>html-janitor *, no fixed version yet. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Jul 2018 20:06:17 GMT</pubDate><category>npm</category><category>html-janitor</category></item></channel></rss>