agentprime: CWE-841Every new CWE-841 Advisory and CVE.https://agentprime.io/CVE-2026-109231: Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Changehttps://agentprime.io/advisories/CVE-2026-109231/https://agentprime.io/advisories/CVE-2026-109231/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 09:29:27 GMTCVECVE-2026-119558: OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Pointshttps://agentprime.io/advisories/CVE-2026-119558/https://agentprime.io/advisories/CVE-2026-119558/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:31:07 GMTCVECVE-2026-115248: subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflowhttps://agentprime.io/advisories/CVE-2026-115248/https://agentprime.io/advisories/CVE-2026-115248/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 13:30:10 GMTCVECVE-2026-113165: Google Chrome: Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47…https://agentprime.io/advisories/CVE-2026-113165/https://agentprime.io/advisories/CVE-2026-113165/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:02:26 GMTCVECVE-2026-113308: Google Chrome: Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a…https://agentprime.io/advisories/CVE-2026-113308/https://agentprime.io/advisories/CVE-2026-113308/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:02:19 GMTCVECVE-2026-113094: Google Chrome: Inappropriate implementation in API in Google Chrome prior to 156.0.8078.47 allowed a…https://agentprime.io/advisories/CVE-2026-113094/https://agentprime.io/advisories/CVE-2026-113094/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:02:01 GMTCVECVE-2026-103977: FileRise: Session-scoped TOTP rate limiting permits repeated verification attemptshttps://agentprime.io/advisories/CVE-2026-103977/https://agentprime.io/advisories/CVE-2026-103977/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 20:38:39 GMTCVECVE-2026-70079: Windows DNS Denial of Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-70079/https://agentprime.io/advisories/CVE-2026-70079/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:59:37 GMTCVECVE-2026-108789: deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflowhttps://agentprime.io/advisories/CVE-2026-108789/https://agentprime.io/advisories/CVE-2026-108789/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 02:15:31 GMTCVECVE-2026-19878: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Accesshttps://agentprime.io/advisories/CVE-2026-19878/https://agentprime.io/advisories/CVE-2026-19878/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:02:37 GMTCVECVE-2026-104626: Gitea fork workflow job revival through later approvalhttps://agentprime.io/advisories/CVE-2026-104626/https://agentprime.io/advisories/CVE-2026-104626/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:23:03 GMTCVEvm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)https://agentprime.io/advisories/GHSA-r4fx-v8hh-22mv/https://agentprime.io/advisories/GHSA-r4fx-v8hh-22mv/vm2 <3.11.7, fixed in 3.11.7. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Oct 2026 22:35:04 GMTnpmvm2CVE-2026-95385: Google Chrome: Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior…https://agentprime.io/advisories/CVE-2026-95385/https://agentprime.io/advisories/CVE-2026-95385/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:31:58 GMTCVECVE-2026-95370: Google Chrome: Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a…https://agentprime.io/advisories/CVE-2026-95370/https://agentprime.io/advisories/CVE-2026-95370/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:31:48 GMTCVECVE-2026-95369: Google Chrome: Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a…https://agentprime.io/advisories/CVE-2026-95369/https://agentprime.io/advisories/CVE-2026-95369/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:31:46 GMTCVEKlever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplacehttps://agentprime.io/advisories/GHSA-26r5-4mm2-px5c/https://agentprime.io/advisories/GHSA-26r5-4mm2-px5c/github.com/klever-io/klever-go <1.7.20, fixed in 1.7.20. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 23 Sep 2026 21:24:03 GMTGogithub.com/klever-io/klever-goCVE-2026-65126: NVIDIA Infrastructure Controller: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker…https://agentprime.io/advisories/CVE-2026-65126/https://agentprime.io/advisories/CVE-2026-65126/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:10:25 GMTCVECVE-2026-48974: HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handlerhttps://agentprime.io/advisories/CVE-2026-48974/https://agentprime.io/advisories/CVE-2026-48974/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:42:59 GMTCVECVE-2026-78135: strongSwan: libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2…https://agentprime.io/advisories/CVE-2026-78135/https://agentprime.io/advisories/CVE-2026-78135/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 02:07:28 GMTCVECVE-2026-87503: Google Chrome: Inappropriate implementation in Downloads in Google Chrome on on Android prior to…https://agentprime.io/advisories/CVE-2026-87503/https://agentprime.io/advisories/CVE-2026-87503/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 00:09:42 GMTCVECVE-2026-67279: SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2026-67279/https://agentprime.io/advisories/CVE-2026-67279/CVSS 6.9 (Medium). Critical: In CISA’s KEV catalogue since 25 Sept 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:57 GMTCVEcriticalKEVCVE-2026-82423: macrozheng mall Payment Status Endpoint paySuccess behavioral workflowhttps://agentprime.io/advisories/CVE-2026-82423/https://agentprime.io/advisories/CVE-2026-82423/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 22:15:10 GMTCVEklever-go: Percentage-transfer royalty skips the source debit at exactly-100% splitshttps://agentprime.io/advisories/GHSA-v358-wf77-39xv/https://agentprime.io/advisories/GHSA-v358-wf77-39xv/github.com/klever-io/klever-go <1.7.19-rc4, fixed in 1.7.19-rc4. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 28 Aug 2026 20:27:44 GMTGogithub.com/klever-io/klever-goCVE-2026-78103: Dimension Log Server Configuration Lock Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-78103/https://agentprime.io/advisories/CVE-2026-78103/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:26:31 GMTCVECVE-2026-78618: Dimension Business Logic Flaw Allows Chained Backend Object Operationshttps://agentprime.io/advisories/CVE-2026-78618/https://agentprime.io/advisories/CVE-2026-78618/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:26:30 GMTCVECVE-2026-77508: Weblate: Unverified REST API email changeshttps://agentprime.io/advisories/CVE-2026-77508/https://agentprime.io/advisories/CVE-2026-77508/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 19:56:59 GMTCVECVE-2026-15365: vivo Kids Mode: A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password…https://agentprime.io/advisories/CVE-2026-15365/https://agentprime.io/advisories/CVE-2026-15365/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 06:45:35 GMTCVECVE-2026-80195: Kimai before 2.63.0 Team Membership Removal via APIhttps://agentprime.io/advisories/CVE-2026-80195/https://agentprime.io/advisories/CVE-2026-80195/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 23:19:02 GMTCVECVE-2026-79083: Google Chrome: Improper enforcement of behavioral workflow in Media in Google Chrome prior to…https://agentprime.io/advisories/CVE-2026-79083/https://agentprime.io/advisories/CVE-2026-79083/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 20:10:38 GMTCVECVE-2026-75081: Webkul Bagisto store behavioral workflowhttps://agentprime.io/advisories/CVE-2026-75081/https://agentprime.io/advisories/CVE-2026-75081/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 23:45:08 GMTCVECVE-2026-19993: Webkul Bagisto RMA State Validation update-status behavioral workflowhttps://agentprime.io/advisories/CVE-2026-19993/https://agentprime.io/advisories/CVE-2026-19993/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 06:00:09 GMTCVECVE-2026-19213: WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflowhttps://agentprime.io/advisories/CVE-2026-19213/https://agentprime.io/advisories/CVE-2026-19213/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 17:30:39 GMTCVECVE-2026-19208: WonderTrader TraderDD.cpp queryTrades behavioral workflowhttps://agentprime.io/advisories/CVE-2026-19208/https://agentprime.io/advisories/CVE-2026-19208/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 15:00:54 GMTCVECVE-2026-19037: WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflowhttps://agentprime.io/advisories/CVE-2026-19037/https://agentprime.io/advisories/CVE-2026-19037/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 12:30:57 GMTCVECVE-2026-18029: Insufficient validation of payment status in pretix-girosolutionhttps://agentprime.io/advisories/CVE-2026-18029/https://agentprime.io/advisories/CVE-2026-18029/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 10:39:29 GMTCVECVE-2026-16103: Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemptionhttps://agentprime.io/advisories/CVE-2026-16103/https://agentprime.io/advisories/CVE-2026-16103/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 16:43:50 GMTCVESylius: Cart FormComponent allows modification or deletion of an already-completed orderhttps://agentprime.io/advisories/GHSA-5597-7rmh-97q5/https://agentprime.io/advisories/GHSA-5597-7rmh-97q5/sylius/sylius >=2.0.0, <2.0.18 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.6, fixed in 2.0.18, 2.1.15, 2.2.6. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 09 Jul 2026 21:03:41 GMTPackagistsylius/syliusCVE-2025-36333: Vulnerabilities found in Watson Data Intelligencehttps://agentprime.io/advisories/CVE-2025-36333/https://agentprime.io/advisories/CVE-2025-36333/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 20:15:19 GMTCVEFilament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submissionhttps://agentprime.io/advisories/GHSA-mc5j-f6wx-h9qh/https://agentprime.io/advisories/GHSA-mc5j-f6wx-h9qh/filament/filament >=4.0.0, <4.11.5 || >=5.0.0, <5.6.5, fixed in 4.11.5, 5.6.5. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 25 Jun 2026 18:45:45 GMTPackagistfilament/filamentCVE-2026-57536: Insufficient validation of payment status in pretix-molliehttps://agentprime.io/advisories/CVE-2026-57536/https://agentprime.io/advisories/CVE-2026-57536/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 14:08:37 GMTCVECVE-2026-13222: Insufficient validation of payment status in pretix-oppwahttps://agentprime.io/advisories/CVE-2026-13222/https://agentprime.io/advisories/CVE-2026-13222/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 14:07:03 GMTCVECVE-2026-13223: Insufficient validation of payment status in pretix-computophttps://agentprime.io/advisories/CVE-2026-13223/https://agentprime.io/advisories/CVE-2026-13223/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 14:03:54 GMTCVECVE-2026-46540: Nimiq light-blockchain: Light blockchain rebranch issuehttps://agentprime.io/advisories/CVE-2026-46540/https://agentprime.io/advisories/CVE-2026-46540/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 23:45:01 GMTCVEgun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOMhttps://agentprime.io/advisories/GHSA-2j82-37xg-f9wp/https://agentprime.io/advisories/GHSA-2j82-37xg-f9wp/gun >=2.0.0, <2.4.0, fixed in 2.4.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 08 Jun 2026 14:12:36 GMTHexgunCVE-2026-45023: AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/executehttps://agentprime.io/advisories/CVE-2026-45023/https://agentprime.io/advisories/CVE-2026-45023/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:30:55 GMTCVECVE-2026-8477: Devolutions Server: Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval…https://agentprime.io/advisories/CVE-2026-8477/https://agentprime.io/advisories/CVE-2026-8477/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 May 2026 15:27:34 GMTCVEEthyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detectionhttps://agentprime.io/advisories/GHSA-qx5f-ghc2-7g5c/https://agentprime.io/advisories/GHSA-qx5f-ghc2-7g5c/ethyca-fides >=2.75.0, <2.83.2, fixed in 2.83.2. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 21:11:37 GMTPyPIethyca-fidesYAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`https://agentprime.io/advisories/GHSA-xhw7-j96h-c3g5/https://agentprime.io/advisories/GHSA-xhw7-j96h-c3g5/YAFNET.Core <4.0.5, fixed in 4.0.5. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 20:32:27 GMTNuGetYAFNET.Corenet-imap vulnerable to STARTTLS stripping via invalid response timinghttps://agentprime.io/advisories/GHSA-vcgp-9326-pqcp/https://agentprime.io/advisories/GHSA-vcgp-9326-pqcp/net-imap <0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4, fixed in 0.3.10, 0.4.24, 0.5.14, 0.6.4. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 04 May 2026 22:01:52 GMTRubyGemsnet-imapCVE-2026-41259: Mastodon: Insufficient verification of email addresseshttps://agentprime.io/advisories/CVE-2026-41259/https://agentprime.io/advisories/CVE-2026-41259/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Apr 2026 18:55:20 GMTCVE