<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-783</title><description>Every new CWE-783 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108691: mall4j through 4.0 Operator Precedence Error Deletes Other Users&apos; Cart Items via /p/shopCart/cleanExpiryProdList</title><link>https://agentprime.io/advisories/CVE-2026-108691/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108691/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 01:12:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108690: mall4j through 4.0 Operator Precedence Error Exposes Other Users&apos; Cart Items via /p/shopCart/expiryProdList</title><link>https://agentprime.io/advisories/CVE-2026-108690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108690/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 01:12:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7270: Local privilege escalation via execve()</title><link>https://agentprime.io/advisories/CVE-2026-7270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7270/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 07:02:48 GMT</pubDate><category>CVE</category></item><item><title>DOMPurify&apos;s ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation</title><link>https://agentprime.io/advisories/GHSA-39q2-94rc-95cp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-39q2-94rc-95cp/</guid><description>dompurify &lt;3.4.0, fixed in 3.4.0. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Apr 2026 00:46:35 GMT</pubDate><category>npm</category><category>dompurify</category></item><item><title>CVE-2026-0209: PureStorage FlashArray: Under certain administrative conditions…</title><link>https://agentprime.io/advisories/CVE-2026-0209/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0209/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Apr 2026 17:52:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25233: PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug</title><link>https://agentprime.io/advisories/CVE-2026-25233/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25233/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24210: A logic error was addressed with improved error handling.</title><link>https://agentprime.io/advisories/CVE-2025-24210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24210/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 31 Mar 2025 22:22:59 GMT</pubDate><category>CVE</category></item><item><title>Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods</title><link>https://agentprime.io/advisories/GHSA-w6fv-6gcc-x825/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-w6fv-6gcc-x825/</guid><description>zincati &gt;=0.0.24, &lt;0.0.30, fixed in 0.0.30. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Mar 2025 14:46:56 GMT</pubDate><category>crates.io</category><category>zincati</category></item><item><title>CVE-2024-49736: In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-49736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49736/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jan 2025 23:04:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-13322: In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2017-13322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-13322/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jan 2025 23:06:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-20480: Cisco IOS XE Software: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined…</title><link>https://agentprime.io/advisories/CVE-2024-20480/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20480/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Sep 2024 16:27:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-44093: In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-44093/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-44093/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Sep 2024 20:28:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34741: Improper privilege management in Google Android</title><link>https://agentprime.io/advisories/CVE-2024-34741/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34741/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Aug 2024 21:56:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-27886: A logic issue was addressed with improved restrictions.</title><link>https://agentprime.io/advisories/CVE-2024-27886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27886/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jul 2024 22:16:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34726: In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-34726/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34726/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:11:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34723: In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-34723/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34723/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:11:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34720: Google Android: In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of…</title><link>https://agentprime.io/advisories/CVE-2024-34720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34720/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:11:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31335: In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-31335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31335/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:11:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31331: In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-31331/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31331/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:11:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31326: In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-31326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31326/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 20:09:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-32896: there is a possible way to bypass due to a logic error in the code.</title><link>https://agentprime.io/advisories/CVE-2024-32896/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32896/</guid><description>CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 13 Jun 2024: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jun 2024 21:01:57 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-20314: Cisco IOS XE Software: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature…</title><link>https://agentprime.io/advisories/CVE-2024-20314/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20314/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 16:57:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-20477: Android: In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt…</title><link>https://agentprime.io/advisories/CVE-2022-20477/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-20477/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Dec 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>