agentprime: CWE-838

MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

Fri, 30 Oct 2026 22:59:45 GMT

org.mariadb.jdbc:mariadb-java-client >=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11, fixed in 3.3.7, 3.4.5, 3.5.11. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-114650: Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

Thu, 22 Oct 2026 19:13:55 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84463: Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

Fri, 25 Sep 2026 18:19:19 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output

Fri, 28 Aug 2026 22:49:03 GMT

org.mariadb:r2dbc-mariadb <1.4.1, fixed in 1.4.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Fri, 28 Aug 2026 22:47:19 GMT

org.mariadb.jdbc:mariadb-java-client <2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9, fixed in 2.7.14, 3.3.5, 3.4.3, 3.5.9. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Round-trip Corruption via Improper Entity Escaping in xml_builder

Fri, 21 Aug 2026 09:52:44 GMT

xml_builder >=0.0.6, <2.4.1, fixed in 2.4.1. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-53641: FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal

Mon, 06 Jul 2026 22:36:38 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-4052: Google Chrome: Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed…

Mon, 05 May 2025 18:10:37 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-11702: Mozilla Firefox: Copying sensitive information from Private Browsing tabs on Android, such as passwords…

Tue, 26 Nov 2024 13:33:57 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Moodle Unsanitized HTML in site log for config_log_created

Fri, 31 May 2024 21:30:55 GMT

moodle/moodle <4.1.10 || >=4.2.0, <4.2.7 || >=4.3.0, <4.3.4, fixed in 4.1.10, 4.2.7, 4.3.4. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-5770: HTML injection in email body through email subject

Tue, 09 Jan 2024 22:02:03 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6512: Google Chrome: Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62…

Wed, 06 Dec 2023 01:19:20 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-3735: Google Chrome: Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to…

Tue, 01 Aug 2023 22:39:17 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin

Wed, 19 Oct 2022 19:00:22 GMT

org.jenkins-ci.plugins:pipeline-input-step <456.vd8a_957db_5b_e9, fixed in 456.vd8a_957db_5b_e9. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins

Wed, 19 Oct 2022 19:00:18 GMT

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view >=2.25, <2.27 || <2.24.2, fixed in 2.27, 2.24.2. CVSS 8.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Pimcore Access Control Issues

Tue, 24 May 2022 17:01:23 GMT

pimcore/pimcore <6.2.2, fixed in 6.2.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-7292: Web Gateway (MWG) - Inappropriate Encoding for output context

Wed, 15 Jul 2020 14:50:14 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-6110: In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI c…

Thu, 31 Jan 2019 00:00:00 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.