agentprime: CWE-75Every new CWE-75 Advisory and CVE.https://agentprime.io/Duplicate Advisory: Untrusted Query Object Evaluation in RPC APIhttps://agentprime.io/advisories/GHSA-xw2c-hrr9-4xwr/https://agentprime.io/advisories/GHSA-xw2c-hrr9-4xwr/surrealdb *, no fixed version yet. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sat, 18 Jul 2026 15:31:48 GMTcrates.iosurrealdbLangroid: handle_message() executes user-supplied tool JSON without sender verification https://agentprime.io/advisories/GHSA-gjgq-w2m6-wr5q/https://agentprime.io/advisories/GHSA-gjgq-w2m6-wr5q/langroid <0.65.3, fixed in 0.65.3. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 06 Jul 2026 20:42:18 GMTPyPIlangroidCVE-2026-31908: Apache APISIX: forward auth plugin allows header injectionhttps://agentprime.io/advisories/CVE-2026-31908/https://agentprime.io/advisories/CVE-2026-31908/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 08:06:18 GMTCVEcriticalNuclio Shell Runtime Command Injection Leading to Privilege Escalationhttps://agentprime.io/advisories/GHSA-95fj-3w7g-4r27/https://agentprime.io/advisories/GHSA-95fj-3w7g-4r27/github.com/nuclio/nuclio <1.15.20, fixed in 1.15.20. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 04 Mar 2026 21:05:51 GMTGogithub.com/nuclio/nuclioCVE-2026-27120: Leaf-kit html escaping does not work on characters that are part of extended grapheme clusterhttps://agentprime.io/advisories/CVE-2026-27120/https://agentprime.io/advisories/CVE-2026-27120/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 21:27:09 GMTCVECVE-2024-27708: Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.https://agentprime.io/advisories/CVE-2024-27708/https://agentprime.io/advisories/CVE-2024-27708/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Dec 2025 00:00:00 GMTCVEcriticalpython-ldap has sanitization bypass in ldap.filter.escape_filter_charshttps://agentprime.io/advisories/GHSA-r7r6-cc7p-4v5m/https://agentprime.io/advisories/GHSA-r7r6-cc7p-4v5m/python-ldap <3.4.5, fixed in 3.4.5. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 10 Oct 2025 22:51:28 GMTPyPIpython-ldapFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.https://agentprime.io/advisories/GHSA-9r64-3wmc-x8m8/https://agentprime.io/advisories/GHSA-9r64-3wmc-x8m8/apache-airflow-providers-snowflake <6.4.0, fixed in 6.4.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 24 Jun 2025 08:15:24 GMTPyPIapache-airflow-providers-snowflakecriticalCVE-2024-9940: Calculated Fields Form <= 5.2.45 - HTML Injectionhttps://agentprime.io/advisories/CVE-2024-9940/https://agentprime.io/advisories/CVE-2024-9940/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Oct 2024 02:06:05 GMTCVECVE-2024-37779: WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant script functionality.https://agentprime.io/advisories/CVE-2024-37779/https://agentprime.io/advisories/CVE-2024-37779/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Sep 2024 00:00:00 GMTCVEUntrusted Query Object Evaluation in RPC APIhttps://agentprime.io/advisories/GHSA-64f8-pjgr-9wmr/https://agentprime.io/advisories/GHSA-64f8-pjgr-9wmr/surrealdb <1.5.5 || >=2.0.0-beta.1, <2.0.0-beta.3, fixed in 1.5.5, 2.0.0-beta.3. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 11 Sep 2024 19:20:07 GMTcrates.iosurrealdbsurrealdb-coreCVE-2024-39227: GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3…https://agentprime.io/advisories/CVE-2024-39227/https://agentprime.io/advisories/CVE-2024-39227/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 00:00:00 GMTCVEcriticalCVE-2024-24257: An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.https://agentprime.io/advisories/CVE-2024-24257/https://agentprime.io/advisories/CVE-2024-24257/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jul 2024 00:00:00 GMTCVECVE-2024-39243: An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.https://agentprime.io/advisories/CVE-2024-39243/https://agentprime.io/advisories/CVE-2024-39243/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 00:00:00 GMTCVEcriticalCVE-2024-35373: Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.https://agentprime.io/advisories/CVE-2024-35373/https://agentprime.io/advisories/CVE-2024-35373/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 May 2024 20:28:45 GMTCVEcriticalCVE-2024-31812: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.https://agentprime.io/advisories/CVE-2024-31812/https://agentprime.io/advisories/CVE-2024-31812/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Apr 2024 00:00:00 GMTCVECVE-2024-31809: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.https://agentprime.io/advisories/CVE-2024-31809/https://agentprime.io/advisories/CVE-2024-31809/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Apr 2024 00:00:00 GMTCVECVE-2024-31806: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which can reboot the system without authorization.https://agentprime.io/advisories/CVE-2024-31806/https://agentprime.io/advisories/CVE-2024-31806/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Apr 2024 00:00:00 GMTCVEWinter CMS Server-Side Template Injection (SSTI) vulnerabilityhttps://agentprime.io/advisories/GHSA-8r5j-gm3j-cx9c/https://agentprime.io/advisories/GHSA-8r5j-gm3j-cx9c/wintercms/winter <=1.2.3, no fixed version yet. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 29 Mar 2024 18:30:42 GMTPackagistwintercms/winterBlack vulnerable to Regular Expression Denial of Service (ReDoS)https://agentprime.io/advisories/GHSA-fj7x-q9j7-g6q6/https://agentprime.io/advisories/GHSA-fj7x-q9j7-g6q6/black <24.3.0, fixed in 24.3.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 19 Mar 2024 06:30:52 GMTPyPIblackCVE-2024-0801: Unauthenticated DoS in Arcserve Unified Data Protectionhttps://agentprime.io/advisories/CVE-2024-0801/https://agentprime.io/advisories/CVE-2024-0801/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.42 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 19:04:47 GMTCVEcriticalCVE-2024-0044: In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.https://agentprime.io/advisories/CVE-2024-0044/https://agentprime.io/advisories/CVE-2024-0044/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Mar 2024 16:35:21 GMTCVECVE-2024-23274: An injection issue was addressed with improved input validation.https://agentprime.io/advisories/CVE-2024-23274/https://agentprime.io/advisories/CVE-2024-23274/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 01:36:06 GMTCVECVE-2024-23268: An injection issue was addressed with improved input validation.https://agentprime.io/advisories/CVE-2024-23268/https://agentprime.io/advisories/CVE-2024-23268/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 01:35:48 GMTCVECVE-2024-27622: A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21.https://agentprime.io/advisories/CVE-2024-27622/https://agentprime.io/advisories/CVE-2024-27622/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 00:00:00 GMTCVEKeycloak vulnerable to reflected XSS via wildcard in OIDC redirect_urihttps://agentprime.io/advisories/GHSA-cvg2-7c3j-g36j/https://agentprime.io/advisories/GHSA-cvg2-7c3j-g36j/org.keycloak:keycloak-services <23.0.3, fixed in 23.0.3. CVSS 4.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 18 Dec 2023 19:31:02 GMTMavenorg.keycloak:keycloak-servicesDuplicate Advisory: Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_urihttps://agentprime.io/advisories/GHSA-5968-qw33-h47j/https://agentprime.io/advisories/GHSA-5968-qw33-h47j/org.keycloak:keycloak-services <23.0.3, fixed in 23.0.3. CVSS 4.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 15 Dec 2023 00:31:03 GMTMavenorg.keycloak:keycloak-servicesApache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getServicehttps://agentprime.io/advisories/GHSA-rmqp-9w4c-gc7w/https://agentprime.io/advisories/GHSA-rmqp-9w4c-gc7w/axis:axis <=1.4, no fixed version yet. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 Sep 2023 15:30:25 GMTMavenaxis:axisorg.apache.axis:axiscriticalthorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameterhttps://agentprime.io/advisories/GHSA-3j93-7rf7-p7m6/https://agentprime.io/advisories/GHSA-3j93-7rf7-p7m6/thorsten/phpmyfaq <3.1.12, fixed in 3.1.12. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 05 Apr 2023 18:30:18 GMTPackagistthorsten/phpmyfaqCVE-2023-27533: A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…https://agentprime.io/advisories/CVE-2023-27533/https://agentprime.io/advisories/CVE-2023-27533/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVEcriticalCVE-2023-23912: Code injection in Ubiquiti EdgeRouter(s) and USG(s)https://agentprime.io/advisories/CVE-2023-23912/https://agentprime.io/advisories/CVE-2023-23912/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Feb 2023 00:00:00 GMTCVECVE-2023-0302: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2https://agentprime.io/advisories/CVE-2023-0302/https://agentprime.io/advisories/CVE-2023-0302/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 15 Jan 2023 00:00:00 GMTCVECVE-2022-48217: The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior.https://agentprime.io/advisories/CVE-2022-48217/https://agentprime.io/advisories/CVE-2022-48217/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jan 2023 00:00:00 GMTCVEFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.https://agentprime.io/advisories/GHSA-83pm-7v48-5jp4/https://agentprime.io/advisories/GHSA-83pm-7v48-5jp4/rdiffweb <2.5.5, fixed in 2.5.5. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Dec 2022 15:15:00 GMTPyPIrdiffwebFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.https://agentprime.io/advisories/GHSA-rj5f-vm79-5j84/https://agentprime.io/advisories/GHSA-rj5f-vm79-5j84/octoprint <1.8.3, fixed in 1.8.3. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 19 Oct 2022 13:15:00 GMTPyPIoctoprintCVE-2022-24039: Siemens Desigo PXC4: A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884)…https://agentprime.io/advisories/CVE-2022-24039/https://agentprime.io/advisories/CVE-2022-24039/Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 09:46:46 GMTCVECode injection in pluploadhttps://agentprime.io/advisories/GHSA-rp2c-jrgp-cvr8/https://agentprime.io/advisories/GHSA-rp2c-jrgp-cvr8/plupload <2.3.9, fixed in 2.3.9. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 16 Dec 2021 15:32:31 GMTnpmpluploadCachet configuration leakhttps://agentprime.io/advisories/GHSA-88f9-7xxh-c688/https://agentprime.io/advisories/GHSA-88f9-7xxh-c688/cachethq/cachet <2.5.1, fixed in 2.5.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 30 Aug 2021 16:11:43 GMTPackagistcachethq/cachetSpecial Element Injection in notebookhttps://agentprime.io/advisories/GHSA-hwvq-6gjx-j797/https://agentprime.io/advisories/GHSA-hwvq-6gjx-j797/notebook <5.7.11 || >=6.0.0, <6.4.1, fixed in 5.7.11, 6.4.1. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 23 Aug 2021 19:40:38 GMTPyPInotebookcriticalJupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>https://agentprime.io/advisories/GHSA-4952-p58q-6crx/https://agentprime.io/advisories/GHSA-4952-p58q-6crx/jupyterlab <1.2.21 || >=2.0.0a0, <2.2.10 || >=2.3.0a0, <2.3.2 || >=3.0.0a0, <3.0.17 || >=3.1.0a0, <3.1.4, fixed in 1.2.21, 2.2.10, 2.3.2, 3.0.17, 3.1.4. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 23 Aug 2021 19:40:22 GMTPyPIjupyterlabnotebookCVE-2021-22910: Rocket.Chat server: A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4…https://agentprime.io/advisories/CVE-2021-22910/https://agentprime.io/advisories/CVE-2021-22910/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Aug 2021 12:27:46 GMTCVECVE-2021-22911: Rocket.Chat server: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11…https://agentprime.io/advisories/CVE-2021-22911/https://agentprime.io/advisories/CVE-2021-22911/Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 May 2021 11:14:39 GMTCVECVE-2016-9471: Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection.https://agentprime.io/advisories/CVE-2016-9471/https://agentprime.io/advisories/CVE-2016-9471/Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Mar 2017 02:46:00 GMTCVE