agentprime: CWE-696

CVE-2026-82898: Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in

Sun, 01 Nov 2026 22:14:06 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65219: Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

Tue, 27 Oct 2026 07:57:12 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

GitPython validates a submodule's ".git" path only after cloning into it (RCE)

Thu, 22 Oct 2026 16:41:14 GMT

gitpython <3.2.1, fixed in 3.2.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-73535: Gitea second-factor bypass through OpenID identity linking

Wed, 14 Oct 2026 14:37:39 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110450: Nix: Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation…

Wed, 14 Oct 2026 04:03:12 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework

Tue, 13 Oct 2026 09:00:00 GMT

typo3/cms-form >=14.0.0, <14.3.9, fixed in 14.3.9. CVSS 6.3 (Medium). Published by Packagist. Not analysed by agentprime yet.

Docling imports plugin entry points before the allow_external_plugins check

Wed, 07 Oct 2026 20:40:56 GMT

docling >=2.27.0, <2.131.0, fixed in 2.131.0. CVSS 6.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration

Tue, 06 Oct 2026 15:29:25 GMT

github.com/external-secrets/external-secrets >=0.10.0, <1.3.2, fixed in 1.3.2. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-103353: WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability

Thu, 01 Oct 2026 10:48:43 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103012: Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when…

Wed, 30 Sep 2026 11:30:38 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content

Tue, 29 Sep 2026 23:11:01 GMT

adm-zip <0.6.1, fixed in 0.6.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93330: Devolutions Server: Improper rule enforcement in the PAM Active Directory provider in Devolutions Server…

Tue, 29 Sep 2026 15:25:16 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93304: (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

Sun, 27 Sep 2026 09:05:37 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73446: Security Advisory 0160

Tue, 15 Sep 2026 23:08:19 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59305: Partition interceptor may be improperly added while sending message

Thu, 27 Aug 2026 17:58:01 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Russh: Channel-scoped server callbacks can be reached without an open channel

Mon, 03 Aug 2026 15:35:00 GMT

russh <0.62.5, fixed in 0.62.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44108: Firewall bypass during shutdown

Thu, 30 Jul 2026 06:53:42 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67217: cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation

Wed, 29 Jul 2026 13:32:04 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65100: Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Wed, 29 Jul 2026 09:06:17 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14169: ads-tec Industrial IT: Account lockout via non-atomic user creation

Tue, 28 Jul 2026 09:07:36 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56355: GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Sat, 20 Jun 2026 20:08:05 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49318: Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

Fri, 29 May 2026 13:18:52 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49317: Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

Fri, 29 May 2026 12:42:27 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices

Thu, 14 May 2026 03:32:08 GMT

ironic <=36.0.0, no fixed version yet. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

Mon, 11 May 2026 16:16:06 GMT

@github/copilot <1.0.43, fixed in 1.0.43. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44600: Tor: Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the…

Thu, 07 May 2026 02:20:51 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input

Wed, 06 May 2026 23:39:14 GMT

kanidmd_lib <1.9.3, fixed in 1.9.3. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenStack Horizon has Incorrect Behavior Order

Tue, 05 May 2026 18:33:27 GMT

horizon >=25.6, <25.7.3, fixed in 25.7.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40583: UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

Tue, 21 Apr 2026 16:57:42 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41254: Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

Sat, 18 Apr 2026 06:43:13 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40223: systemd: In systemd 258 before 260, a local unprivileged user can trigger an assert when a…

Fri, 10 Apr 2026 15:10:56 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35386: OpenBSD OpenSSH: In OpenSSH before 10.3, command execution can occur via shell metacharacters in a…

Thu, 02 Apr 2026 16:44:27 GMT

CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation

Sun, 29 Mar 2026 15:48:58 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility

Sun, 29 Mar 2026 15:47:50 GMT

openclaw >=2026.3.11, <2026.3.28, fixed in 2026.3.28. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete

Thu, 26 Mar 2026 21:27:49 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions

Thu, 26 Mar 2026 21:23:04 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement

Thu, 26 Mar 2026 19:08:34 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-33305: OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor

Thu, 19 Mar 2026 20:30:57 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-9904: Canon Inc. Generic Plus PCL6 Printer Driver: Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer…

Mon, 29 Sep 2025 00:46:03 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55114: BMC Control-M/Agent improper IP address filtering order

Tue, 16 Sep 2025 12:20:30 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-48965: mbedtls: Mbed TLS before 3.6.4 has a NULL pointer dereference because…

Sun, 20 Jul 2025 00:00:00 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-47688: WhiteBeam: In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2…

Mon, 23 Jun 2025 00:00:00 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20012: Intel(R) Core™ Ultra Processors: Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an…

Tue, 13 May 2025 21:01:33 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

GraphQL grant on a property might be cached with different objects

Fri, 04 Apr 2025 14:19:42 GMT

api-platform/core <3.4.17 || >=4.0.0-alpha.1, <4.0.22 || >=4.1.0-alpha.1, <4.1.5, fixed in 3.4.17, 4.0.22, 4.1.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-0150: Zoom Workplace Apps for iOS - Incorrect Behavior Order

Tue, 11 Mar 2025 17:06:43 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-52968: MariaDB: MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17…

Sat, 08 Mar 2025 00:00:00 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-45157: An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used.

Thu, 05 Sep 2024 00:00:00 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.