# CWE-749. Every Advisory and CVE whose sources give the weakness CWE-749, newest first. ## Records, newest first (an older page) - [Opening a malicious website while running a Nuxt dev server could allow read-only access to code](https://agentprime.io/advisories/GHSA-4gf7-ff8x-hq99.md) `GHSA-4gf7-ff8x-hq99`, `CVE-2025-24361` · npm `@nuxt/rspack-builder` and 1 more: affected `>=3.12.2, <3.15.3`, fixed in `3.15.3` · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-749 - [ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape](https://agentprime.io/advisories/GHSA-3wwr-3g9f-9gc7.md) `GHSA-3wwr-3g9f-9gc7`, `CVE-2025-24359`, `PYSEC-2026-1195` · PyPI `asteval`: affected `<1.0.6`, fixed in `1.0.6` · CVSS 8.4 High · Not analysed yet · Published 24 Jan 2025 · Tags: Memory corruption, CWE-749 - [ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape](https://agentprime.io/advisories/GHSA-vp47-9734-prjw.md) `GHSA-vp47-9734-prjw` · PyPI `asteval`: affected `<1.0.6`, fixed in `1.0.6` · CVSS 8.4 High · Not analysed yet · Published 23 Jan 2025 · Tags: Race condition, CWE-749 - [TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-8mv3-37rc-pvxj.md) `GHSA-8mv3-37rc-pvxj`, `CVE-2024-55945`, `PKSA-x19y-62bn-sh15` · Packagist `typo3/cms-lowlevel`: affected `>=11.0.0, <11.5.42`, fixed in `11.5.42` · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-7835-fcv3-g256.md) `GHSA-7835-fcv3-g256`, `CVE-2024-55924`, `PKSA-vzxh-337v-pjvb` · Packagist `typo3/cms-scheduler`: affected `>=11.0.0, <11.5.42`, fixed in `11.5.42` · CVSS 8.0 High · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-7r5q-4qgx-v545.md) `GHSA-7r5q-4qgx-v545`, `CVE-2024-55923`, `PKSA-mjqj-t7m3-nkyp` · Packagist `typo3/cms-indexed-search`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-ww7h-g2qf-7xv6.md) `GHSA-ww7h-g2qf-7xv6`, `CVE-2024-55922`, `PKSA-p6ct-pkr6-phmf` · Packagist `typo3/cms-form`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 5.4 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-4g52-pq8j-6qv5.md) `GHSA-4g52-pq8j-6qv5`, `CVE-2024-55921`, `PKSA-1xq1-yw5z-ygvg` · Packagist `typo3/cms-extensionmanager`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Cross-Site Request Forgery in Dashboard Module](https://agentprime.io/advisories/GHSA-qwx7-39pw-2mhr.md) `GHSA-qwx7-39pw-2mhr`, `CVE-2024-55920`, `PKSA-6m93-gtx3-1dnm` · Packagist `typo3/cms-dashboard`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Cross-Site Request Forgery in Backend User Module](https://agentprime.io/advisories/GHSA-6w4x-gcx3-8p7v.md) `GHSA-6w4x-gcx3-8p7v`, `CVE-2024-55894`, `PKSA-v3gm-s5dn-x7cy` · Packagist `typo3/cms-beuser`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [TYPO3 Cross-Site Request Forgery in Log Module](https://agentprime.io/advisories/GHSA-cjfr-9f5r-3q93.md) `GHSA-cjfr-9f5r-3q93`, `CVE-2024-55893`, `PKSA-vz6p-3jbg-f6db` · Packagist `typo3/cms-belog`: affected `>=10.0.0, <10.4.48 || >=11.0.0, <11.5.42 || >=12.0.0, <12.4.25 || >=13.0.0, <13.4.3`, fixed in `10.4.48`, `11.5.42`, `12.4.25`, `13.4.3` · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF), CWE-749 - [Swift Mailer - Moderately critical - Access bypass - SA-CONTRIB-2024-006](https://agentprime.io/advisories/CVE-2024-13242.md) `CVE-2024-13242` · CVE record: Drupal Swift Mailer (abandoned) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-749 - [PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-39470.md) `CVE-2023-39470` · CVE record: PaperCut NG · CVSS 7.2 High · Not analysed yet · Published 22 Nov 2024 · Tags: CWE-749 - [Orchid Platform has Method Exposure Vulnerability in Modals](https://agentprime.io/advisories/GHSA-cm46-gqf4-mv4f.md) `GHSA-cm46-gqf4-mv4f`, `CVE-2024-51992`, `PKSA-y896-hf4j-cr9c` · Packagist `orchid/platform`: affected `>=8.0, <14.43.0`, fixed in `14.43.0` · CVSS 4.1 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-749 - [Sharp and Toshiba Tec MFPs provide configuration related APIs.](https://agentprime.io/advisories/CVE-2024-47005.md) `CVE-2024-47005` · CVE record: Sharp Corporation Sharp Digital Full-color MFPs and Monochrome MFPs and 3 more · CVSS 8.1 High · Not analysed yet · Published 25 Oct 2024 · Tags: CWE-749 - [MXsecurity License Generation Function Disclosure](https://agentprime.io/advisories/CVE-2024-4739.md) `CVE-2024-4739` · CVE record: Moxa MXsecurity Series · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2024 · Tags: CWE-749 - [Local privilege escalation vulnerability in AVG Internet Security](https://agentprime.io/advisories/CVE-2024-6510.md) `CVE-2024-6510` · CVE record: AVG Internet Security · CVSS 7.8 High · Not analysed yet · Published 12 Sept 2024 · Tags: Broken access control, CWE-427, CWE-749 - [Grafana's default installation of \`synthetic-monitoring-agent\` exposes sensitive information in github.com/grafana/synthetic-monitoring-agent](https://agentprime.io/advisories/GHSA-9j4f-f249-q5w8.md) `GHSA-9j4f-f249-q5w8`, `CVE-2022-46156`, `GO-2022-1132` · Go `github.com/grafana/synthetic-monitoring-agent`: affected `<0.12.0`, fixed in `0.12.0` · CVSS 7.2 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-489, CWE-749 - [Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer](https://agentprime.io/advisories/CVE-2024-6689.md) `CVE-2024-6689` · CVE record: baramundi Management Agent · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2024 · Tags: CWE-749 - [Siemens SINEC Traffic Analyzer: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All…](https://agentprime.io/advisories/CVE-2024-35209.md) `CVE-2024-35209` · CVE record: Siemens SINEC Traffic Analyzer · CVSS 6.9 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-749 - [D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-5299.md) `CVE-2024-5299` · CVE record: D-Link D-View · CVSS 8.8 High · Not analysed yet · Published 23 May 2024 · Tags: CWE-749 - [D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-5298.md) `CVE-2024-5298` · CVE record: D-Link D-View · CVSS 8.8 High · Not analysed yet · Published 23 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51584.md) `CVE-2023-51584` · CVE record: Voltronic Power ViewPower · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51583.md) `CVE-2023-51583` · CVE record: Voltronic Power ViewPower · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51582.md) `CVE-2023-51582` · CVE record: Voltronic Power ViewPower · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51581.md) `CVE-2023-51581` · CVE record: Voltronic Power ViewPower · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability](https://agentprime.io/advisories/CVE-2023-51578.md) `CVE-2023-51578` · CVE record: Voltronic Power ViewPower · CVSS 7.5 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-51577.md) `CVE-2023-51577` · CVE record: Voltronic Power ViewPower · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51575.md) `CVE-2023-51575` · CVE record: Voltronic Power ViewPower · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-51574.md) `CVE-2023-51574` · CVE record: Voltronic Power ViewPower · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44414.md) `CVE-2023-44414` · CVE record: D-Link D-View · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-42032.md) `CVE-2023-42032` · CVE record: Visualware MyConnection Server · CVSS 7.5 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40501.md) `CVE-2023-40501` · CVE record: LG Simple Editor · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40500.md) `CVE-2023-40500` · CVE record: LG Simple Editor · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [PDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-39505.md) `CVE-2023-39505` · CVE record: PDF-XChange PDF-XChange Editor · CVSS 5.5 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-39495.md) `CVE-2023-39495` · CVE record: PDF-XChange PDF-XChange Editor · CVSS 5.5 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-39493.md) `CVE-2023-39493` · CVE record: PDF-XChange PDF-XChange Editor · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-39468.md) `CVE-2023-39468` · CVE record: Triangle MicroWorks SCADA Data Gateway · CVSS 7.2 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38124.md) `CVE-2023-38124` · CVE record: Inductive Automation Ignition · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.60 · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38101.md) `CVE-2023-38101` · CVE record: NETGEAR ProSAFE Network Management System · CVSS 7.2 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38097.md) `CVE-2023-38097` · CVE record: NETGEAR ProSAFE Network Management System · CVSS 7.2 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Kofax Power PDF exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-37330.md) `CVE-2023-37330` · CVE record: Kofax Power PDF · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-27365.md) `CVE-2023-27365` · CVE record: Foxit PDF Editor · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-27364.md) `CVE-2023-27364` · CVE record: Foxit PDF Editor · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-27363.md) `CVE-2023-27363` · CVE record: Foxit PDF Reader · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.42 · Not analysed yet · Published 3 May 2024 · Tags: CWE-749 - [myQNAPcloud Link](https://agentprime.io/advisories/CVE-2024-32764.md) `CVE-2024-32764` · CVE record: QNAP Systems Inc. myQNAPcloud Link · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Apr 2024 · Tags: Authentication bypass, CWE-346, CWE-749 - [IBM Storage Defender - Resiliency Service privilege escalation](https://agentprime.io/advisories/CVE-2024-27261.md) `CVE-2024-27261` · CVE record: IBM Storage Defender · CVSS 6.4 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-749 - [Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point…: A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350…](https://agentprime.io/advisories/CVE-2023-49074.md) `CVE-2023-49074` · CVE record: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-749 - [Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-51573.md) `CVE-2023-51573` · CVE record: Voltronic Power ViewPower Pro · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.46 · Not analysed yet · Published 1 Apr 2024 · Tags: CWE-749 - [JetBrains TeamCity: In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain…](https://agentprime.io/advisories/CVE-2024-29880.md) `CVE-2024-29880` · CVE record: JetBrains TeamCity · CVSS 4.2 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: CWE-749 - [LangChain Experimental vulnerable to arbitrary code execution](https://agentprime.io/advisories/GHSA-v8vj-cv27-hjv8.md) `GHSA-v8vj-cv27-hjv8`, `CVE-2024-27444`, `PYSEC-2026-375` · PyPI `langchain-experimental`: affected `<0.0.52`, fixed in `0.0.52` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Feb 2024 · Tags: CWE-749 - [An issue was discovered in MISP before 2.4.184.](https://agentprime.io/advisories/CVE-2024-25675.md) `CVE-2024-25675` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2024 · Tags: CWE-749 - [Honeywell ControlEdge UOC: An attacker could potentially exploit this vulnerability…](https://agentprime.io/advisories/CVE-2023-5389.md) `CVE-2023-5389` · CVE record: Honeywell ControlEdge UOC · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jan 2024 · Tags: CWE-749 - [Improper Privilege Management in sap-xssec](https://agentprime.io/advisories/GHSA-6mjg-37cp-42x5.md) `GHSA-6mjg-37cp-42x5`, `CVE-2023-50423`, `PYSEC-2023-261` · PyPI `sap-xssec`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Dec 2023 · Tags: Privilege escalation, CWE-749 - [Improper JWT Signature Validation in SAP Security Services Library](https://agentprime.io/advisories/GHSA-59c9-pxq8-9c73.md) `GHSA-59c9-pxq8-9c73`, `CVE-2023-50422`, `CVE-2023-50424`, `GHSA-92cg-ghq6-9587`, `GHSA-m8rw-rcpq-2vp2`, `GO-2023-2400` · Maven `com.sap.cloud.security:java-security` and 2 more: affected `<2.17.0 || >=3.0.0, <3.3.0`, fixed in `2.17.0`, `3.3.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Dec 2023 · Tags: Privilege escalation, CWE-749 - [Duplicate Advisory: Privilege escalation in sap-xssec](https://agentprime.io/advisories/GHSA-p99h-pfg6-qrfg.md) `GHSA-p99h-pfg6-qrfg` · PyPI `sap-xssec`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 9.1 Critical · Withdrawn · Not analysed yet · Published 12 Dec 2023 · Tags: Privilege escalation, Broken access control, CWE-749 - [Escalation of privileges in @sap/xssec](https://agentprime.io/advisories/GHSA-p2vx-qj66-88q3.md) `GHSA-p2vx-qj66-88q3`, `CVE-2023-49583` · npm `@sap/xssec`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Dec 2023 · Tags: Privilege escalation, Broken access control, CWE-749 - [Duplicate Advisory: Improper JWT Signature Validation in SAP Security Services Library](https://agentprime.io/advisories/GHSA-gcgw-q47m-prvj.md) `GHSA-gcgw-q47m-prvj` · Maven `com.sap.cloud.security:java-security` and 2 more: affected `<2.17.0 || >=3.0.0, <3.3.0`, fixed in `2.17.0`, `3.3.0` · CVSS 9.1 Critical · Withdrawn · Not analysed yet · Published 12 Dec 2023 · Tags: Privilege escalation, Broken access control, CWE-749 - [Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function](https://agentprime.io/advisories/CVE-2023-39226.md) `CVE-2023-39226` · CVE record: Delta Electronics InfraSuite Device Master · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Nov 2023 · Tags: CWE-749 - [Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function](https://agentprime.io/advisories/CVE-2023-40151.md) `CVE-2023-40151` · CVE record: Red Lion Controls ST-IPm-8460 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Nov 2023 · Tags: CWE-749 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .