agentprime: CWE-672Every new CWE-672 Advisory and CVE.https://agentprime.io/CVE-2026-121256: Google Chrome: Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote…https://agentprime.io/advisories/CVE-2026-121256/https://agentprime.io/advisories/CVE-2026-121256/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 20:42:41 GMTCVENetfoil doesn't decrement TTLhttps://agentprime.io/advisories/GHSA-9ppr-wfw9-xvr2/https://agentprime.io/advisories/GHSA-9ppr-wfw9-xvr2/github.com/tinfoil-factory/netfoil >=0.3.0, <0.6.1, fixed in 0.6.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 03 Nov 2026 16:48:29 GMTGogithub.com/tinfoil-factory/netfoilCVE-2026-120449: Outline before 1.12.0 Improper Access Control via Public Document Shareshttps://agentprime.io/advisories/CVE-2026-120449/https://agentprime.io/advisories/CVE-2026-120449/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:08 GMTCVECVE-2026-62966: ESPAsyncWebServer multipart parser has null-pointer writehttps://agentprime.io/advisories/CVE-2026-62966/https://agentprime.io/advisories/CVE-2026-62966/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 20:53:37 GMTCVECVE-2026-93006: Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contenthttps://agentprime.io/advisories/CVE-2026-93006/https://agentprime.io/advisories/CVE-2026-93006/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:23 GMTCVECVE-2026-115402: Race condition in OpenVPN ovpn-dco-winhttps://agentprime.io/advisories/CVE-2026-115402/https://agentprime.io/advisories/CVE-2026-115402/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:00:23 GMTCVECVE-2026-53918: odhcpd DHCPv6 IA dangling first pointer use-after-freehttps://agentprime.io/advisories/CVE-2026-53918/https://agentprime.io/advisories/CVE-2026-53918/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:21:00 GMTCVECVE-2026-113121: Google Chrome: Use of released resource in ContextMenu in Google Chrome on on Android prior to…https://agentprime.io/advisories/CVE-2026-113121/https://agentprime.io/advisories/CVE-2026-113121/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:02:49 GMTCVECVE-2026-113216: Google Chrome: Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a…https://agentprime.io/advisories/CVE-2026-113216/https://agentprime.io/advisories/CVE-2026-113216/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:02:28 GMTCVECVE-2026-57446: libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handlehttps://agentprime.io/advisories/CVE-2026-57446/https://agentprime.io/advisories/CVE-2026-57446/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 15:46:33 GMTCVECVE-2026-96589: Gitea private repository access retained after rejected transferhttps://agentprime.io/advisories/CVE-2026-96589/https://agentprime.io/advisories/CVE-2026-96589/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:25:38 GMTCVECVE-2026-106345: Google Chrome: Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a…https://agentprime.io/advisories/CVE-2026-106345/https://agentprime.io/advisories/CVE-2026-106345/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:41:43 GMTCVECVE-2026-106310: Google Chrome: Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a…https://agentprime.io/advisories/CVE-2026-106310/https://agentprime.io/advisories/CVE-2026-106310/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:41:43 GMTCVECVE-2026-106320: Google Chrome: Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote…https://agentprime.io/advisories/CVE-2026-106320/https://agentprime.io/advisories/CVE-2026-106320/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:41:41 GMTCVECVE-2026-106339: Google Chrome: Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote…https://agentprime.io/advisories/CVE-2026-106339/https://agentprime.io/advisories/CVE-2026-106339/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:41:41 GMTCVECVE-2026-95366: Google Chrome: Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote…https://agentprime.io/advisories/CVE-2026-95366/https://agentprime.io/advisories/CVE-2026-95366/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:31:44 GMTCVECVE-2026-55250: Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Cacheshttps://agentprime.io/advisories/CVE-2026-55250/https://agentprime.io/advisories/CVE-2026-55250/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 22:17:35 GMTCVECVE-2026-85044: Google Chrome: Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82…https://agentprime.io/advisories/CVE-2026-85044/https://agentprime.io/advisories/CVE-2026-85044/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 19:26:14 GMTCVECVE-2026-19538: Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLShttps://agentprime.io/advisories/CVE-2026-19538/https://agentprime.io/advisories/CVE-2026-19538/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 08:47:08 GMTCVECVE-2026-79010: Google Chrome: Operation on a resource after expiration or release in Network in Google Chrome prior to…https://agentprime.io/advisories/CVE-2026-79010/https://agentprime.io/advisories/CVE-2026-79010/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 20:10:14 GMTCVECVE-2026-44725: EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code executionhttps://agentprime.io/advisories/CVE-2026-44725/https://agentprime.io/advisories/CVE-2026-44725/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 14:35:11 GMTCVECVE-2026-50575: BetterDesk has a replay behavior vulnerability when devices are deletedhttps://agentprime.io/advisories/CVE-2026-50575/https://agentprime.io/advisories/CVE-2026-50575/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 13:28:28 GMTCVECVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failurehttps://agentprime.io/advisories/CVE-2026-72108/https://agentprime.io/advisories/CVE-2026-72108/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 05:52:50 GMTCVECVE-2026-68481: Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProviderhttps://agentprime.io/advisories/CVE-2026-68481/https://agentprime.io/advisories/CVE-2026-68481/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 11:22:37 GMTCVECVE-2026-42955: Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue recordshttps://agentprime.io/advisories/CVE-2026-42955/https://agentprime.io/advisories/CVE-2026-42955/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:05:53 GMTCVECVE-2026-47087: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.https://agentprime.io/advisories/CVE-2026-47087/https://agentprime.io/advisories/CVE-2026-47087/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 00:00:00 GMTCVEnebula-mesh: Certificate revocation is never enforced at the meshhttps://agentprime.io/advisories/GHSA-cm26-5974-52h8/https://agentprime.io/advisories/GHSA-cm26-5974-52h8/github.com/forgekeep/nebula-mesh <0.7.1, fixed in 0.7.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 14 Jul 2026 20:28:18 GMTGogithub.com/forgekeep/nebula-meshSylius: Cart FormComponent allows modification or deletion of an already-completed orderhttps://agentprime.io/advisories/GHSA-5597-7rmh-97q5/https://agentprime.io/advisories/GHSA-5597-7rmh-97q5/sylius/sylius >=2.0.0, <2.0.18 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.6, fixed in 2.0.18, 2.1.15, 2.2.6. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 09 Jul 2026 21:03:41 GMTPackagistsylius/syliusBetter Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flowshttps://agentprime.io/advisories/GHSA-2vg6-77g8-24mp/https://agentprime.io/advisories/GHSA-2vg6-77g8-24mp/better-auth >=0.3.4, <1.6.11, fixed in 1.6.11. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:56:45 GMTnpmbetter-auth@better-auth/scimCVE-2026-58291: Microsoft Edge (Chromium-based) Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-58291/https://agentprime.io/advisories/CVE-2026-58291/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 20:35:37 GMTCVEzebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tiphttps://agentprime.io/advisories/GHSA-2gf8-q9rr-jq3h/https://agentprime.io/advisories/GHSA-2gf8-q9rr-jq3h/zebrad <4.5.0, fixed in 4.5.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Jul 2026 20:11:36 GMTcrates.iozebradzebra-stateCVE-2026-56314: Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpointhttps://agentprime.io/advisories/CVE-2026-56314/https://agentprime.io/advisories/CVE-2026-56314/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Jun 2026 21:04:48 GMTCVETornado: CurlAsyncHTTPClient leaks per-request credentials on handle reusehttps://agentprime.io/advisories/GHSA-pw6j-qg29-8w7f/https://agentprime.io/advisories/GHSA-pw6j-qg29-8w7f/tornado <6.5.7, fixed in 6.5.7. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:37:24 GMTPyPItornadoCVE-2026-2379: Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabledhttps://agentprime.io/advisories/CVE-2026-2379/https://agentprime.io/advisories/CVE-2026-2379/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:59:40 GMTCVECVE-2026-33463: Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Accesshttps://agentprime.io/advisories/CVE-2026-33463/https://agentprime.io/advisories/CVE-2026-33463/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 19:37:38 GMTCVECVE-2026-42791: OCSP responder certificate validity period not checked in public_keyhttps://agentprime.io/advisories/CVE-2026-42791/https://agentprime.io/advisories/CVE-2026-42791/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 12:23:13 GMTCVECVE-2026-33278: Possible arbitrary code execution during DNSSEC validationhttps://agentprime.io/advisories/CVE-2026-33278/https://agentprime.io/advisories/CVE-2026-33278/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:18:15 GMTCVEcriticalCVE-2026-32244: Discourse: Cached outdated summaries can leak removed contenthttps://agentprime.io/advisories/CVE-2026-32244/https://agentprime.io/advisories/CVE-2026-32244/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 00:04:12 GMTCVEMattermost doesn't enforce the PostEditTimeLimit on non-message post fieldshttps://agentprime.io/advisories/GHSA-hw87-6jcq-9f8q/https://agentprime.io/advisories/GHSA-hw87-6jcq-9f8q/github.com/mattermost/mattermost-server >=0.0.0-20250731163400-5b955468ea1e, <0.0.0-20260414103857-b21ef302025e || >=11.5.0, <11.5.2, fixed in 0.0.0-20260414103857-b21ef302025e, 11.5.2. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 15 May 2026 21:31:33 GMTGogithub.com/mattermost/mattermost-serverDuplicate Advisory: OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reloadhttps://agentprime.io/advisories/GHSA-v8j2-5f9p-fmh4/https://agentprime.io/advisories/GHSA-v8j2-5f9p-fmh4/openclaw <2026.4.23, fixed in 2026.4.23. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 11 May 2026 18:31:47 GMTnpmopenclawCVE-2013-10075: Apache::Session versions through 1.94 for Perl re-creates deleted sessionshttps://agentprime.io/advisories/CVE-2013-10075/https://agentprime.io/advisories/CVE-2013-10075/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 07:44:13 GMTCVEcriticalDuplicate Advisory: OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotationhttps://agentprime.io/advisories/GHSA-m8wm-r5vq-qjpg/https://agentprime.io/advisories/GHSA-m8wm-r5vq-qjpg/openclaw <2026.4.15, fixed in 2026.4.15. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 06 May 2026 21:31:42 GMTnpmopenclawOpenClaw's Webhooks SecretRef route secret remains valid after rotation/reloadhttps://agentprime.io/advisories/GHSA-q8ff-7ffm-m3r9/https://agentprime.io/advisories/GHSA-q8ff-7ffm-m3r9/openclaw <2026.4.23, fixed in 2026.4.23. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 18:42:51 GMTnpmopenclawOpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotationhttps://agentprime.io/advisories/GHSA-xmxx-7p24-h892/https://agentprime.io/advisories/GHSA-xmxx-7p24-h892/openclaw <2026.4.15, fixed in 2026.4.15. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 17 Apr 2026 22:32:02 GMTnpmopenclawcriticalCVE-2026-1629: Permalink Preview Information Disclosure After Permission Revocationhttps://agentprime.io/advisories/CVE-2026-1629/https://agentprime.io/advisories/CVE-2026-1629/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 20:24:05 GMTCVEParse Server's MFA recovery codes not consumed after usehttps://agentprime.io/advisories/GHSA-4hf6-3x24-c9m8/https://agentprime.io/advisories/GHSA-4hf6-3x24-c9m8/parse-server <8.6.33 || >=9.0.0-alpha.1, <9.6.0-alpha.7, fixed in 8.6.33, 9.6.0-alpha.7. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 11 Mar 2026 00:35:41 GMTnpmparse-serverCVE-2026-30978: Heap-use-after-free in CIccCmm::AddXform()https://agentprime.io/advisories/CVE-2026-30978/https://agentprime.io/advisories/CVE-2026-30978/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 17:46:18 GMTCVECVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()https://agentprime.io/advisories/CVE-2026-23111/https://agentprime.io/advisories/CVE-2026-23111/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Feb 2026 13:29:55 GMTCVEJuju has broken CMR authorization in github.com/juju/jujuhttps://agentprime.io/advisories/GHSA-j477-6vpg-6c8x/https://agentprime.io/advisories/GHSA-j477-6vpg-6c8x/github.com/juju/juju *, no fixed version yet. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 02 Feb 2026 21:05:59 GMTGogithub.com/juju/jujuCVE-2025-69415: Plex Media Server: In Plex Media Server (PMS) through 1.42.2.10156…https://agentprime.io/advisories/CVE-2025-69415/https://agentprime.io/advisories/CVE-2025-69415/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Jan 2026 16:49:36 GMTCVE