agentprime: CWE-757

CVE-2026-20578: In Modem, there is a possible information disclosure due to side channel information disclosure.

Mon, 02 Nov 2026 02:33:54 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

Tue, 27 Oct 2026 16:08:54 GMT

rustls <0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2, fixed in 0.23.46, 0.24.0-dev.2. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-110310: RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

Wed, 14 Oct 2026 19:37:48 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109952: FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response

Tue, 13 Oct 2026 13:27:17 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

Thu, 08 Oct 2026 16:23:36 GMT

org.asynchttpclient:async-http-client >=3.0.0.Beta1, <3.0.13 || >=2.0.0, <2.16.1, fixed in 3.0.13, 2.16.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-107279: AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

Wed, 07 Oct 2026 21:10:26 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Wed, 30 Sep 2026 07:42:43 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89177: Howyar｜WeenyGenius - Use of Insecure Protocol

Fri, 11 Sep 2026 07:35:40 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59293: SMB minimum protocol dialect defaults to SMB1

Thu, 27 Aug 2026 17:57:51 GMT

CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72889: Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

Wed, 19 Aug 2026 07:20:09 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72887: Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Sun, 16 Aug 2026 13:50:19 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18691: Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

Tue, 11 Aug 2026 18:46:02 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55953: TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Mon, 27 Jul 2026 15:21:29 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms

Tue, 21 Jul 2026 17:47:39 GMT

org.postgresql:postgresql >=42.7.4, <42.7.12, fixed in 42.7.12. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-4942: IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

Fri, 17 Jul 2026 19:32:02 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

Tue, 07 Jul 2026 20:55:41 GMT

better-auth <1.6.11, fixed in 1.6.11. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

Wed, 01 Jul 2026 21:51:17 GMT

com.ongres.scram:scram-client <3.3, fixed in 3.3. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-6092: Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

Thu, 25 Jun 2026 21:06:20 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

Fri, 19 Jun 2026 20:47:04 GMT

CoreWCF.Primitives <1.8.1 || >=1.9.0, <1.9.1, fixed in 1.8.1, 1.9.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

Mon, 15 Jun 2026 17:32:28 GMT

symfony/mailomat-mailer >=7.2.0, <7.4.13 || >=8.0.0, <8.0.13, fixed in 7.4.13, 8.0.13. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-1677: net: TLS 1.2 connections allowed on TLS 1.3 sockets

Mon, 11 May 2026 05:52:12 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

Fri, 24 Apr 2026 15:59:17 GMT

aws-encryption-sdk >=2.0.0, <3.3.1 || >=4.0.0, <4.0.5, fixed in 3.3.1, 4.0.5. CVSS 5.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-32650: Anviz CrossChex Standard Algorithm Downgrade

Fri, 17 Apr 2026 19:52:45 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2673: OpenSSL TLS 1.3 server may choose unexpected key agreement group

Fri, 13 Mar 2026 13:23:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10693: Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure

Fri, 31 Oct 2025 19:20:16 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59270: psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

Tue, 16 Sep 2025 14:41:06 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36582: Dell NetWorker: Dell NetWorker, versions 19.12.0.1 and prior…

Tue, 01 Jul 2025 13:12:02 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8773: Protocol Downgrade in SIMPLE.ERP

Mon, 24 Mar 2025 12:33:15 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-24154: An out-of-bounds write was addressed with improved input validation.

Mon, 27 Jan 2025 21:45:44 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4995: Protocol Downgrade in Wapro ERP Desktop

Wed, 18 Dec 2024 11:36:47 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-38883: An issue in Horizon Business Services Inc.

Fri, 02 Aug 2024 00:00:00 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-20069: In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check.

Mon, 03 Jun 2024 02:04:48 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Fri, 26 Jan 2024 01:57:31 GMT

github.com/dexidp/dex <0.0.0-20240125115555-5bbdb4420254 || >=2.37.0, <2.38.0, fixed in 0.0.0-20240125115555-5bbdb4420254, 2.38.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-33160: IBM Security Directory Suite information disclosure

Fri, 06 Oct 2023 21:09:11 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

quarkus-core vulnerable to client driven TLS cipher downgrading

Tue, 04 Jul 2023 15:30:18 GMT

io.quarkus:quarkus-core <2.16.8.Final, fixed in 2.16.8.Final. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-23000: Weak Default SSL use in Port Forwarding Service

Mon, 25 Jul 2022 18:46:02 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-25029: Silicon Labs Z-Wave: The Z-Wave specification requires that S2 security can be downgraded to S0 or other less…

Fri, 04 Feb 2022 22:33:06 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-36326: Dell EMC Streaming Data Platform: Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip…

Tue, 30 Nov 2021 20:40:13 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-16200: Philips Clinical Collaboration Platform Algorithm Downgrade

Fri, 18 Sep 2020 17:53:23 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-10135: Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks

Tue, 19 May 2020 15:50:14 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-14887: Red Hat wildfly: A flaw was found when an OpenSSL security provider is used with Wildfly…

Mon, 16 Mar 2020 14:48:09 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

postfix-mta-sts-resolver Algorithm Downgrade vulnerability

Fri, 05 Jul 2019 21:06:58 GMT

postfix-mta-sts-resolver <0.5.1, fixed in 0.5.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2017-9267: eDirectory LDAP peer certificate validation issue

Fri, 02 Mar 2018 20:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-9269: lack of keypinning in libzypp could lead to repository switching

Thu, 01 Mar 2018 19:00:00 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.