<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-779</title><description>Every new CWE-779 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-20210: Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-20210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20210/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 16:08:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20209: Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-20209/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20209/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 16:08:26 GMT</pubDate><category>CVE</category></item><item><title>PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket</title><link>https://agentprime.io/advisories/GHSA-xp4f-g2cm-rhg7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xp4f-g2cm-rhg7/</guid><description>pocketmine/pocketmine-mp &lt;5.42.1, fixed in 5.42.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Apr 2026 19:43:33 GMT</pubDate><category>Packagist</category><category>pocketmine/pocketmine-mp</category></item><item><title>CVE-2026-28718: Denial of service due to insufficient input validation in authentication logging.</title><link>https://agentprime.io/advisories/CVE-2026-28718/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28718/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Mar 2026 23:54:05 GMT</pubDate><category>CVE</category></item><item><title>AIOHTTP Vulnerable to Cookie Parser Warning Storm</title><link>https://agentprime.io/advisories/GHSA-fh55-r93g-j68g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fh55-r93g-j68g/</guid><description>aiohttp &lt;3.13.3, fixed in 3.13.3. CVSS 2.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Jan 2026 23:13:46 GMT</pubDate><category>PyPI</category><category>aiohttp</category></item><item><title>CVE-2025-8696: DoS attack against the Stork UI from an unauthenticated user</title><link>https://agentprime.io/advisories/CVE-2025-8696/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8696/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Sep 2025 17:59:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-51397: A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into…</title><link>https://agentprime.io/advisories/CVE-2025-51397/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-51397/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Jul 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53636: Open OnDemand Shell App closed websocket DoS</title><link>https://agentprime.io/advisories/CVE-2025-53636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53636/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jul 2025 21:20:14 GMT</pubDate><category>CVE</category></item><item><title>Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs</title><link>https://agentprime.io/advisories/GHSA-367v-5ppj-2hrx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-367v-5ppj-2hrx/</guid><description>org.jenkins-ci.plugins:htmlpublisher &lt;427, fixed in 427. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Jul 2025 18:30:45 GMT</pubDate><category>Maven</category><category>org.jenkins-ci.plugins:htmlpublisher</category></item><item><title>Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages</title><link>https://agentprime.io/advisories/GHSA-9768-hprv-crj5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9768-hprv-crj5/</guid><description>org.jenkins-ci.plugins:credentials-binding &lt;687.689.v1a, fixed in 687.689.v1a. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Jul 2025 18:30:44 GMT</pubDate><category>Maven</category><category>org.jenkins-ci.plugins:credentials-binding</category></item><item><title>CVE-2024-55628: Suricata oversized resource names utilizing DNS name compression can lead to resource starvation</title><link>https://agentprime.io/advisories/CVE-2024-55628/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-55628/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Jan 2025 18:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36072: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server appl…</title><link>https://agentprime.io/advisories/CVE-2024-36072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36072/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Jun 2024 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-36416: SuiteCRM v4 API Excessive log data DOS</title><link>https://agentprime.io/advisories/CVE-2024-36416/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36416/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Jun 2024 20:03:05 GMT</pubDate><category>CVE</category></item><item><title>glance-store logs s3 access keys</title><link>https://agentprime.io/advisories/GHSA-wgpq-p2hm-56v9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wgpq-p2hm-56v9/</guid><description>glance-store &lt;=4.6.1, no fixed version yet. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Feb 2024 15:30:24 GMT</pubDate><category>PyPI</category><category>glance-store</category></item><item><title>CVE-2023-23949: An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.</title><link>https://agentprime.io/advisories/CVE-2023-23949/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23949/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Jan 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39874: Samsung Mobile Samsung Account: Sensitive log information leakage vulnerability in Samsung Account prior to version…</title><link>https://agentprime.io/advisories/CVE-2022-39874/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39874/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-31004: Potential secrets being logged to disk in CVE Services</title><link>https://agentprime.io/advisories/CVE-2022-31004/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31004/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 May 2022 21:55:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-25779: Insufficient scope checks allows adding unrelated audit log entries</title><link>https://agentprime.io/advisories/CVE-2022-25779/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-25779/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 May 2022 13:51:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22291: Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.</title><link>https://agentprime.io/advisories/CVE-2022-22291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22291/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Feb 2022 17:40:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25423: Samsung Mobile Watch Active2 PlugIn: Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151…</title><link>https://agentprime.io/advisories/CVE-2021-25423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25423/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jun 2021 14:33:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25422: Samsung Mobile Watch Active PlugIn: Improper log management vulnerability in Watch Active PlugIn prior to version…</title><link>https://agentprime.io/advisories/CVE-2021-25422/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25422/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jun 2021 14:33:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25421: Samsung Mobile Galaxy Watch3 PlugIn: Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version…</title><link>https://agentprime.io/advisories/CVE-2021-25421/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25421/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jun 2021 14:33:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25420: Samsung Mobile Galaxy Watch PlugIn: Improper log management vulnerability in Galaxy Watch PlugIn prior to version…</title><link>https://agentprime.io/advisories/CVE-2021-25420/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25420/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Jun 2021 14:33:46 GMT</pubDate><category>CVE</category></item></channel></rss>