agentprime: CWE-646Every new CWE-646 Advisory and CVE.https://agentprime.io/Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionshttps://agentprime.io/advisories/GHSA-m8f9-9whg-f4xr/https://agentprime.io/advisories/GHSA-m8f9-9whg-f4xr/open-webui <0.9.3, fixed in 0.9.3. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 14 May 2026 20:17:58 GMTPyPIopen-webuiCVE-2026-20172: Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-20172/https://agentprime.io/advisories/CVE-2026-20172/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 16:15:37 GMTCVECVE-2025-30662: Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Followinghttps://agentprime.io/advisories/CVE-2025-30662/https://agentprime.io/advisories/CVE-2025-30662/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 14:53:09 GMTCVECVE-2025-41720: Sauter: Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2025-41720/https://agentprime.io/advisories/CVE-2025-41720/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 06:52:03 GMTCVEMaho is Vulnerable to Authenticated Remote Code Execution via File Uploadhttps://agentprime.io/advisories/GHSA-vgmm-27fc-vmgp/https://agentprime.io/advisories/GHSA-vgmm-27fc-vmgp/mahocommerce/maho <25.9.0, fixed in 25.9.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:52:24 GMTPackagistmahocommerce/mahoDuplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysishttps://agentprime.io/advisories/GHSA-hw34-rqc5-h2gm/https://agentprime.io/advisories/GHSA-hw34-rqc5-h2gm/picklescan <=0.0.21, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 03 Mar 2025 21:30:59 GMTPyPIpicklescanpicklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious p...https://agentprime.io/advisories/GHSA-655q-fx9r-782v/https://agentprime.io/advisories/GHSA-655q-fx9r-782v/picklescan <0.0.22, fixed in 0.0.22. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 03 Mar 2025 19:15:34 GMTPyPIpicklescanCVE-2024-52052: Stream Target Remote Code Execution in Wowza Streaming Enginehttps://agentprime.io/advisories/CVE-2024-52052/https://agentprime.io/advisories/CVE-2024-52052/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 22:20:15 GMTCVEcriticalCVE-2024-38432: Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied Filehttps://agentprime.io/advisories/CVE-2024-38432/https://agentprime.io/advisories/CVE-2024-38432/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 08:50:23 GMTCVECVE-2023-45599: AiLux imx6 bundle: A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability…https://agentprime.io/advisories/CVE-2023-45599/https://agentprime.io/advisories/CVE-2023-45599/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 11:34:38 GMTCVECVE-2021-34639: WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2021-34639/https://agentprime.io/advisories/CVE-2021-34639/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 20:18:29 GMTCVE