agentprime: CWE-669Every new CWE-669 Advisory and CVE.https://agentprime.io/CVE-2026-123010: @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim.https://agentprime.io/advisories/CVE-2026-123010/https://agentprime.io/advisories/CVE-2026-123010/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 04:10:37 GMTCVECVE-2026-122124: Yealink UVC40 E2: On Yealink UVC40 E2 devices before 319.410.0.71…https://agentprime.io/advisories/CVE-2026-122124/https://agentprime.io/advisories/CVE-2026-122124/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:08:31 GMTCVECVE-2026-114722: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping…https://agentprime.io/advisories/CVE-2026-114722/https://agentprime.io/advisories/CVE-2026-114722/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:39:43 GMTCVECVE-2026-93856: OpenStack Cinder: In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the…https://agentprime.io/advisories/CVE-2026-93856/https://agentprime.io/advisories/CVE-2026-93856/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 05:36:39 GMTCVECVE-2026-111793: Openwave Messaging (Ireland) Limited Webtop Media Transcoder: Openwave Webtop Media Transcoder does not enforce administrator-defined file type…https://agentprime.io/advisories/CVE-2026-111793/https://agentprime.io/advisories/CVE-2026-111793/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 18:28:10 GMTCVECVE-2026-111445: Wheels: Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a…https://agentprime.io/advisories/CVE-2026-111445/https://agentprime.io/advisories/CVE-2026-111445/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 03:35:00 GMTCVECVE-2026-110907: Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.https://agentprime.io/advisories/CVE-2026-110907/https://agentprime.io/advisories/CVE-2026-110907/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 02:09:35 GMTCVECVE-2026-106555: OpenBSD OpenSSH: In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly…https://agentprime.io/advisories/CVE-2026-106555/https://agentprime.io/advisories/CVE-2026-106555/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 20:28:56 GMTCVECVE-2026-106553: OpenBSD OpenSSH: In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a…https://agentprime.io/advisories/CVE-2026-106553/https://agentprime.io/advisories/CVE-2026-106553/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 20:25:45 GMTCVEvm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checkshttps://agentprime.io/advisories/GHSA-jf8q-945g-9q4c/https://agentprime.io/advisories/GHSA-jf8q-945g-9q4c/vm2 >=3.11.4, <3.11.7, fixed in 3.11.7. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:42:15 GMTnpmvm2CVE-2026-47574: NVIDIA Virtual GPU Manager: NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker…https://agentprime.io/advisories/CVE-2026-47574/https://agentprime.io/advisories/CVE-2026-47574/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 15:54:57 GMTCVECVE-2026-103106: Pexip Infinity: Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0…https://agentprime.io/advisories/CVE-2026-103106/https://agentprime.io/advisories/CVE-2026-103106/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 02:45:39 GMTCVEDuplicate Advisory: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checkshttps://agentprime.io/advisories/GHSA-hmpr-c9rf-qcrf/https://agentprime.io/advisories/GHSA-hmpr-c9rf-qcrf/vm2 >=3.11.4, <=3.11.6, no fixed version yet. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 17 Sep 2026 15:32:16 GMTnpmvm2CVE-2026-20194: Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-20194/https://agentprime.io/advisories/CVE-2026-20194/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:05:32 GMTCVEcriticalCVE-2026-38924: In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0.https://agentprime.io/advisories/CVE-2026-38924/https://agentprime.io/advisories/CVE-2026-38924/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2026-25832: TrustedFirmware Mbed TLS: In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2…https://agentprime.io/advisories/CVE-2026-25832/https://agentprime.io/advisories/CVE-2026-25832/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2023-37253: An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3.https://agentprime.io/advisories/CVE-2023-37253/https://agentprime.io/advisories/CVE-2023-37253/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2023-37252: An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3.https://agentprime.io/advisories/CVE-2023-37252/https://agentprime.io/advisories/CVE-2023-37252/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2023-32803: Amazon ca-certificates: The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2)…https://agentprime.io/advisories/CVE-2023-32803/https://agentprime.io/advisories/CVE-2023-32803/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2025-45480: Floodlight 71fe8a7 allows disruption of host communication via link spoofing.https://agentprime.io/advisories/CVE-2025-45480/https://agentprime.io/advisories/CVE-2025-45480/CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 00:00:00 GMTCVECVE-2026-89162: PCRE2: In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary…https://agentprime.io/advisories/CVE-2026-89162/https://agentprime.io/advisories/CVE-2026-89162/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 04:15:04 GMTCVECVE-2026-87724: Tor: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not…https://agentprime.io/advisories/CVE-2026-87724/https://agentprime.io/advisories/CVE-2026-87724/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 01:29:46 GMTCVECVE-2026-86144: xmlsoft libxml2: In xinclude in libxml2 before 2.15.4…https://agentprime.io/advisories/CVE-2026-86144/https://agentprime.io/advisories/CVE-2026-86144/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 04:34:43 GMTCVECVE-2026-75010: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…https://agentprime.io/advisories/CVE-2026-75010/https://agentprime.io/advisories/CVE-2026-75010/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 13:01:26 GMTCVECVE-2026-75003: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…https://agentprime.io/advisories/CVE-2026-75003/https://agentprime.io/advisories/CVE-2026-75003/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 12:50:51 GMTCVECVE-2026-75000: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…https://agentprime.io/advisories/CVE-2026-75000/https://agentprime.io/advisories/CVE-2026-75000/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 12:45:56 GMTCVECVE-2026-73574: Zimbra Collaboration: In Zimbra Collaboration before 10.1.17…https://agentprime.io/advisories/CVE-2026-73574/https://agentprime.io/advisories/CVE-2026-73574/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 15:23:55 GMTCVECVE-2026-71194: OpenStack Designate: In OpenStack Designate before 22.0.2…https://agentprime.io/advisories/CVE-2026-71194/https://agentprime.io/advisories/CVE-2026-71194/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 22:23:46 GMTCVECVE-2026-73281: OpenBSD OpenSSH: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended…https://agentprime.io/advisories/CVE-2026-73281/https://agentprime.io/advisories/CVE-2026-73281/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 19:10:33 GMTCVEOpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraintshttps://agentprime.io/advisories/GHSA-mfg3-p6m3-gjgr/https://agentprime.io/advisories/GHSA-mfg3-p6m3-gjgr/nova >=18.0.0, <=31.3.0 || >=32.0.0, <32.2.1 || >=33.0.0, <33.0.2, fixed in 32.2.1, 33.0.2. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 16 Jun 2026 21:32:01 GMTPyPInovaCVE-2026-12068: Avira Password Manager credential disclosure via cross-origin autofill in Firefoxhttps://agentprime.io/advisories/CVE-2026-12068/https://agentprime.io/advisories/CVE-2026-12068/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 22:19:18 GMTCVEOpenStack Ironic allows Boot Script Injectionhttps://agentprime.io/advisories/GHSA-jrh2-f5jc-xpgr/https://agentprime.io/advisories/GHSA-jrh2-f5jc-xpgr/ironic >=17.0.0, <26.1.7 || >=27.0.0, <29.0.6 || >=30.0.0, <32.0.2 || >=33.0.0, <35.0.2, fixed in 26.1.7, 29.0.6, 32.0.2, 35.0.2. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 04 Jun 2026 00:30:25 GMTPyPIironicCVE-2026-44917: OpenStack Ironic: OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager…https://agentprime.io/advisories/CVE-2026-44917/https://agentprime.io/advisories/CVE-2026-44917/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 00:00:00 GMTCVECVE-2026-48847: Roundcube Webmail: Roundcube Webmail 1.6.x before 1.6.16…https://agentprime.io/advisories/CVE-2026-48847/https://agentprime.io/advisories/CVE-2026-48847/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 19:23:40 GMTCVECVE-2026-48846: Roundcube Webmail: In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1…https://agentprime.io/advisories/CVE-2026-48846/https://agentprime.io/advisories/CVE-2026-48846/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 19:21:09 GMTCVECVE-2026-48845: Roundcube Webmail: In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1…https://agentprime.io/advisories/CVE-2026-48845/https://agentprime.io/advisories/CVE-2026-48845/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 19:18:09 GMTCVECVE-2026-48831: Wine: Wine ships a .desktop file that registers itself as a MIME handler for EXE files and…https://agentprime.io/advisories/CVE-2026-48831/https://agentprime.io/advisories/CVE-2026-48831/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 20:52:36 GMTCVETalos Linux has a local privilege escalation from untrusted workloadshttps://agentprime.io/advisories/GHSA-m38g-vww2-mvgx/https://agentprime.io/advisories/GHSA-m38g-vww2-mvgx/github.com/siderolabs/talos <1.12.7, fixed in 1.12.7. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 07 May 2026 02:38:02 GMTGogithub.com/siderolabs/talosCVE-2026-44599: Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.https://agentprime.io/advisories/CVE-2026-44599/https://agentprime.io/advisories/CVE-2026-44599/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 02:11:56 GMTCVEOpenStack Ironic has an Incorrect Resource Transfer Between Sphereshttps://agentprime.io/advisories/GHSA-54w4-233h-x86g/https://agentprime.io/advisories/GHSA-54w4-233h-x86g/ironic-python-agent <26.1.6 || >=27.0.0, <29.0.5 || >=30.0.0, <32.0.1 || >=33.0.0, <35.0.1, fixed in 26.1.6, 29.0.5, 32.0.1, 35.0.1. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 21:31:31 GMTPyPIironic-python-agentCVE-2026-40552: Remote Code Execution in multiple BinSoft productshttps://agentprime.io/advisories/CVE-2026-40552/https://agentprime.io/advisories/CVE-2026-40552/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 13:13:44 GMTCVECVE-2026-41525: KDE Dolphin: KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor…https://agentprime.io/advisories/CVE-2026-41525/https://agentprime.io/advisories/CVE-2026-41525/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 00:00:00 GMTCVECVE-2026-31431: crypto: algif_aead - Revert to operating out-of-placehttps://agentprime.io/advisories/CVE-2026-31431/https://agentprime.io/advisories/CVE-2026-31431/CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 1 May 2026: it is known to be exploited. CVSS score 7.8 (7.0 or more) and EPSS 0.98 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Apr 2026 08:15:10 GMTCVEcriticalKEVCVE-2026-41030: Ascensio ONLYOFFICE DesktopEditors: In ONLYOFFICE DesktopEditors before 9.3.0…https://agentprime.io/advisories/CVE-2026-41030/https://agentprime.io/advisories/CVE-2026-41030/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 05:51:21 GMTCVECVE-2026-40228: systemd: In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of…https://agentprime.io/advisories/CVE-2026-40228/https://agentprime.io/advisories/CVE-2026-40228/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 15:48:44 GMTCVECVE-2026-40225: systemd: In udev in systemd before 260, local root execution can occur via malicious hardware…https://agentprime.io/advisories/CVE-2026-40225/https://agentprime.io/advisories/CVE-2026-40225/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 15:16:19 GMTCVERoundcube Webmail: Insufficient CSS sanitization in HTML e-mail messageshttps://agentprime.io/advisories/GHSA-xpqh-grpw-4xmg/https://agentprime.io/advisories/GHSA-xpqh-grpw-4xmg/roundcube/roundcubemail >=1.7-beta, <1.7-rc5, fixed in 1.7-rc5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 06:31:32 GMTPackagistroundcube/roundcubemailRoundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail messagehttps://agentprime.io/advisories/GHSA-w846-74jr-76cv/https://agentprime.io/advisories/GHSA-w846-74jr-76cv/roundcube/roundcubemail >=1.7-beta, <1.7-rc5, fixed in 1.7-rc5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 06:31:32 GMTPackagistroundcube/roundcubemailRoundcube Webmail: Insufficient CSS sanitization in HTML e-mail messageshttps://agentprime.io/advisories/GHSA-vxg2-hhgr-37fx/https://agentprime.io/advisories/GHSA-vxg2-hhgr-37fx/roundcube/roundcubemail >=1.7-beta, <1.7-rc5, fixed in 1.7-rc5. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 06:31:32 GMTPackagistroundcube/roundcubemailRoundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail messagehttps://agentprime.io/advisories/GHSA-j2g6-8rvg-7mf6/https://agentprime.io/advisories/GHSA-j2g6-8rvg-7mf6/roundcube/roundcubemail >=1.7-beta, <1.7-rc5, fixed in 1.7-rc5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 06:31:32 GMTPackagistroundcube/roundcubemail