<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-657</title><description>Every new CWE-657 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-48399: Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)</title><link>https://agentprime.io/advisories/CVE-2026-48399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48399/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 22:37:03 GMT</pubDate><category>CVE</category></item><item><title>PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)</title><link>https://agentprime.io/advisories/GHSA-qf73-2hrx-xprp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qf73-2hrx-xprp/</guid><description>praisonaiagents &lt;1.5.115, fixed in 1.5.115. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 11:50:48 GMT</pubDate><category>PyPI</category><category>praisonaiagents</category><category>critical</category></item><item><title>CVE-2025-54255: Acrobat Reader | Violation of Secure Design Principles (CWE-657)</title><link>https://agentprime.io/advisories/CVE-2025-54255/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54255/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Sep 2025 20:10:02 GMT</pubDate><category>CVE</category></item><item><title>OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are i...</title><link>https://agentprime.io/advisories/GHSA-8262-pw2q-5qc3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8262-pw2q-5qc3/</guid><description>pycti &gt;=6.4.9, &lt;6.4.11, fixed in 6.4.11. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 19:15:55 GMT</pubDate><category>PyPI</category><category>pycti</category></item><item><title>CVE-2024-57957: Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.</title><link>https://agentprime.io/advisories/CVE-2024-57957/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-57957/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Feb 2025 12:27:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-33849: ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.</title><link>https://agentprime.io/advisories/CVE-2024-33849/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-33849/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 May 2024 15:22:07 GMT</pubDate><category>CVE</category></item><item><title>OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functiona...</title><link>https://agentprime.io/advisories/GHSA-qx4j-f4f2-vjw9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qx4j-f4f2-vjw9/</guid><description>pycti &lt;5.12.32, fixed in 5.12.32. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 23 May 2024 12:15:09 GMT</pubDate><category>PyPI</category><category>pycti</category></item><item><title>Passbolt Api Tabnabbing when opening URI with menu &quot;Open URI in a new tab&quot;</title><link>https://agentprime.io/advisories/GHSA-qm5v-pj64-852j/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qm5v-pj64-852j/</guid><description>passbolt/passbolt_api &lt;2.11.0, fixed in 2.11.0. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 20 May 2024 17:09:57 GMT</pubDate><category>Packagist</category><category>passbolt/passbolt_api</category></item><item><title>CVE-2023-52714: Vulnerability of defects introduced in the design process in the hwnff module.</title><link>https://agentprime.io/advisories/CVE-2023-52714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-52714/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 07 Apr 2024 08:43:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-29320: ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw</title><link>https://agentprime.io/advisories/CVE-2023-29320/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-29320/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Aug 2023 13:17:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-30683: AEM Violation of Secure Design Principles Security feature bypass</title><link>https://agentprime.io/advisories/CVE-2022-30683/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-30683/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Sep 2022 17:45:20 GMT</pubDate><category>CVE</category></item><item><title>Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats</title><link>https://agentprime.io/advisories/GHSA-7gh6-f4jh-3crq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7gh6-f4jh-3crq/</guid><description>magento/community-edition &lt;2.3.7 || &gt;=2.4.0, &lt;2.4.2-p1, fixed in 2.3.7, 2.4.2-p1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 May 2022 19:06:25 GMT</pubDate><category>Packagist</category><category>magento/community-edition</category><category>magento/project-community-edition</category></item><item><title>CVE-2022-28244: Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2022-28244/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-28244/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 May 2022 17:39:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-44714: Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts</title><link>https://agentprime.io/advisories/CVE-2021-44714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-44714/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Jan 2022 19:05:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-36061: Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings</title><link>https://agentprime.io/advisories/CVE-2021-36061/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-36061/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Sep 2021 14:33:53 GMT</pubDate><category>CVE</category></item><item><title>Multiple soundness issues in cgc</title><link>https://agentprime.io/advisories/GHSA-f3mq-99jr-ww4r/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-f3mq-99jr-ww4r/</guid><description>cgc &lt;=0.4.0, no fixed version yet. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Aug 2021 20:56:16 GMT</pubDate><category>crates.io</category><category>cgc</category></item><item><title>fake-static allows converting any reference into a `&apos;static` reference</title><link>https://agentprime.io/advisories/GHSA-8xw8-mmqv-frqq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8xw8-mmqv-frqq/</guid><description>fake-static &lt;=0.1.0, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Aug 2021 20:55:33 GMT</pubDate><category>crates.io</category><category>fake-static</category></item><item><title>CVE-2020-8133: Nextcloud Server: A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1…</title><link>https://agentprime.io/advisories/CVE-2020-8133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-8133/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Nov 2020 14:25:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-15611: Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notific…</title><link>https://agentprime.io/advisories/CVE-2019-15611/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-15611/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Feb 2020 19:08:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-0061: Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation</title><link>https://agentprime.io/advisories/CVE-2019-0061/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-0061/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2019 19:26:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-5478: A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices.</title><link>https://agentprime.io/advisories/CVE-2019-5478/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-5478/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Sep 2019 19:17:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-6032: Schneider Electric Modicon Modbus Protocol: A Violation of Secure Design Principles issue was discovered in Schneider Electric…</title><link>https://agentprime.io/advisories/CVE-2017-6032/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-6032/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jun 2017 02:35:00 GMT</pubDate><category>CVE</category></item></channel></rss>