agentprime: CWE-84Every new CWE-84 Advisory and CVE.https://agentprime.io/CVE-2026-96654: Plex Media Server URL injectionhttps://agentprime.io/advisories/CVE-2026-96654/https://agentprime.io/advisories/CVE-2026-96654/CVSS 6.9 (Medium). Critical: In CISA’s KEV catalogue since 20 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 16:06:35 GMTCVEcriticalKEVCVE-2026-88859: Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restrictionhttps://agentprime.io/advisories/CVE-2026-88859/https://agentprime.io/advisories/CVE-2026-88859/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 11:24:54 GMTCVECVE-2026-54443: Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)https://agentprime.io/advisories/CVE-2026-54443/https://agentprime.io/advisories/CVE-2026-54443/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 18:19:31 GMTCVEJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolhttps://agentprime.io/advisories/GHSA-vmhf-c436-hxj4/https://agentprime.io/advisories/GHSA-vmhf-c436-hxj4/jupyterlab <4.5.9, fixed in 4.5.9. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 19 Jun 2026 15:11:17 GMTPyPIjupyterlabOrval has Code Injection via unsanitized x-enum-descriptions using JS commentshttps://agentprime.io/advisories/GHSA-gch2-phqh-fg9q/https://agentprime.io/advisories/GHSA-gch2-phqh-fg9q/@orval/core >=7.19.0, <7.21.0 || >=8.0.0, <8.2.0, fixed in 7.21.0, 8.2.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Jan 2026 21:17:25 GMTnpm@orval/corecriticalMCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Serverhttps://agentprime.io/advisories/GHSA-g9hg-qhmf-q45m/https://agentprime.io/advisories/GHSA-g9hg-qhmf-q45m/@modelcontextprotocol/inspector <0.16.6, fixed in 0.16.6. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 08 Sep 2025 21:14:23 GMTnpm@modelcontextprotocol/inspectorCVE-2024-52890: IBM Engineering Lifecycle Optimization - Publishing cross-site scriptinghttps://agentprime.io/advisories/CVE-2024-52890/https://agentprime.io/advisories/CVE-2024-52890/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Aug 2025 13:45:59 GMTCVECVE-2025-30203: Tuleap allows XSS via the content of RSS feeds in the RSS widgetshttps://agentprime.io/advisories/CVE-2025-30203/https://agentprime.io/advisories/CVE-2025-30203/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:48:49 GMTCVECVE-2025-25334: An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25334/https://agentprime.io/advisories/CVE-2025-25334/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25331: An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25331/https://agentprime.io/advisories/CVE-2025-25331/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25330: An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25330/https://agentprime.io/advisories/CVE-2025-25330/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25329: An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25329/https://agentprime.io/advisories/CVE-2025-25329/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25326: An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25326/https://agentprime.io/advisories/CVE-2025-25326/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25325: An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25325/https://agentprime.io/advisories/CVE-2025-25325/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25324: An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25324/https://agentprime.io/advisories/CVE-2025-25324/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2025-25323: An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link.https://agentprime.io/advisories/CVE-2025-25323/https://agentprime.io/advisories/CVE-2025-25323/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 00:00:00 GMTCVECVE-2024-42184: HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI schemehttps://agentprime.io/advisories/CVE-2024-42184/https://agentprime.io/advisories/CVE-2024-42184/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2025 01:59:00 GMTCVECVE-2024-45045: JavaScript Injection via url encoded values in links in Collabora Office Androidhttps://agentprime.io/advisories/CVE-2024-45045/https://agentprime.io/advisories/CVE-2024-45045/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 16:49:12 GMTCVECVE-2023-30959: Stored XSS via javascript URI in Apollo Change Requests commenthttps://agentprime.io/advisories/CVE-2023-30959/https://agentprime.io/advisories/CVE-2023-30959/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Sep 2023 17:56:20 GMTCVECross site scripting Vulnerability in backstage Software Cataloghttps://agentprime.io/advisories/GHSA-7hv8-3fr9-j2hv/https://agentprime.io/advisories/GHSA-7hv8-3fr9-j2hv/@backstage/catalog-model <1.2.0, fixed in 1.2.0. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 14 Feb 2023 21:35:10 GMTnpm@backstage/catalog-model@backstage/core-components@backstage/plugin-catalog-backendCVE-2022-40181: Siemens Desigo PXM30-1: A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41)…https://agentprime.io/advisories/CVE-2022-40181/https://agentprime.io/advisories/CVE-2022-40181/Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Oct 2022 00:00:00 GMTCVECVE-2021-3824: OpenVPN Access Server: OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web…https://agentprime.io/advisories/CVE-2021-3824/https://agentprime.io/advisories/CVE-2021-3824/Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Sep 2021 14:53:51 GMTCVECVE-2020-7011: Elastic App Search: Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when…https://agentprime.io/advisories/CVE-2020-7011/https://agentprime.io/advisories/CVE-2020-7011/Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2020 17:55:43 GMTCVE