agentprime: CWE-99Every new CWE-99 Advisory and CVE.https://agentprime.io/CVE-2026-71901: Apache OFBiz: Dispatch arbitrary internal services on SFA componenthttps://agentprime.io/advisories/CVE-2026-71901/https://agentprime.io/advisories/CVE-2026-71901/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:12:01 GMTCVECVE-2026-110283: Multiple vulnerabilities that affects IBM Db2 Genius Hubhttps://agentprime.io/advisories/CVE-2026-110283/https://agentprime.io/advisories/CVE-2026-110283/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:58:06 GMTCVECVE-2026-114726: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…https://agentprime.io/advisories/CVE-2026-114726/https://agentprime.io/advisories/CVE-2026-114726/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:55:25 GMTCVECVE-2026-114725: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…https://agentprime.io/advisories/CVE-2026-114725/https://agentprime.io/advisories/CVE-2026-114725/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:52:10 GMTCVECVE-2026-114717: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…https://agentprime.io/advisories/CVE-2026-114717/https://agentprime.io/advisories/CVE-2026-114717/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:21:14 GMTCVECVE-2026-114716: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…https://agentprime.io/advisories/CVE-2026-114716/https://agentprime.io/advisories/CVE-2026-114716/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:17:45 GMTCVECVE-2026-50218: Akamai Guardicore Platform Agent: Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly…https://agentprime.io/advisories/CVE-2026-50218/https://agentprime.io/advisories/CVE-2026-50218/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 00:00:00 GMTCVECVE-2026-107448: Wizards of the Coast Magic: The Gathering Arena: Magic: The Gathering Arena (Windows/Steam client…https://agentprime.io/advisories/CVE-2026-107448/https://agentprime.io/advisories/CVE-2026-107448/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 03:57:54 GMTCVECVE-2026-106583: OpenBSD OpenSSH: In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username…https://agentprime.io/advisories/CVE-2026-106583/https://agentprime.io/advisories/CVE-2026-106583/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 23:42:14 GMTCVECVE-2026-105444: dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injectionhttps://agentprime.io/advisories/CVE-2026-105444/https://agentprime.io/advisories/CVE-2026-105444/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 21:00:14 GMTCVECVE-2026-100884: Krayin laravel-crm attachment-download Endpoint acl.php resource injectionhttps://agentprime.io/advisories/CVE-2026-100884/https://agentprime.io/advisories/CVE-2026-100884/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 22:30:14 GMTCVEMoquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bughttps://agentprime.io/advisories/GHSA-5f42-97gr-vfhq/https://agentprime.io/advisories/GHSA-5f42-97gr-vfhq/io.moquette:moquette-broker <0.18.1, fixed in 0.18.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 23 Sep 2026 16:11:18 GMTMavenio.moquette:moquette-brokerCVE-2026-94149: Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injectionhttps://agentprime.io/advisories/CVE-2026-94149/https://agentprime.io/advisories/CVE-2026-94149/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 07:45:12 GMTCVECVE-2026-3855: Improper Control of Resource Identifiers ('Resource Injection') in GitLabhttps://agentprime.io/advisories/CVE-2026-3855/https://agentprime.io/advisories/CVE-2026-3855/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 06:34:30 GMTCVECVE-2026-81524: Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driverhttps://agentprime.io/advisories/CVE-2026-81524/https://agentprime.io/advisories/CVE-2026-81524/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:25 GMTCVECVE-2026-81521: Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driverhttps://agentprime.io/advisories/CVE-2026-81521/https://agentprime.io/advisories/CVE-2026-81521/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:31:45 GMTCVECVE-2026-62910: Microsoft Exchange Server Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62910/https://agentprime.io/advisories/CVE-2026-62910/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:04:43 GMTCVECVE-2026-15186: macrozheng mall Portal Endpoint create resource injectionhttps://agentprime.io/advisories/CVE-2026-15186/https://agentprime.io/advisories/CVE-2026-15186/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 13:15:08 GMTCVECVE-2026-13493: AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injectionhttps://agentprime.io/advisories/CVE-2026-13493/https://agentprime.io/advisories/CVE-2026-13493/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 Jun 2026 12:00:09 GMTCVECVE-2026-12207: medkey-org medkey HTTP REST API PatientController.php actionGetPatientById resource injectionhttps://agentprime.io/advisories/CVE-2026-12207/https://agentprime.io/advisories/CVE-2026-12207/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 01:45:08 GMTCVECVE-2026-10624: SourceCodester Human Resource Management Employee View detailview.php resource injectionhttps://agentprime.io/advisories/CVE-2026-10624/https://agentprime.io/advisories/CVE-2026-10624/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 20:30:10 GMTCVECVE-2026-10299: code-projects Online Hospital Management System viewdoctortimings.php resource injectionhttps://agentprime.io/advisories/CVE-2026-10299/https://agentprime.io/advisories/CVE-2026-10299/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 22:45:09 GMTCVECVE-2026-10168: OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injectionhttps://agentprime.io/advisories/CVE-2026-10168/https://agentprime.io/advisories/CVE-2026-10168/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 May 2026 04:00:11 GMTCVECVE-2026-9438: yashpokharna2555 StudentManagementSystem courseDel.php resource injectionhttps://agentprime.io/advisories/CVE-2026-9438/https://agentprime.io/advisories/CVE-2026-9438/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 07:30:11 GMTCVECVE-2026-33603: Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.https://agentprime.io/advisories/CVE-2026-33603/https://agentprime.io/advisories/CVE-2026-33603/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:44 GMTCVExxl-job has a Resource Injection issuehttps://agentprime.io/advisories/GHSA-gw2x-mfwr-h46p/https://agentprime.io/advisories/GHSA-gw2x-mfwr-h46p/com.xuxueli:xxl-job-admin <3.4.0, fixed in 3.4.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 29 Apr 2026 00:30:22 GMTMavencom.xuxueli:xxl-job-adminCVE-2026-5414: Newgen OmniDocs WebApiRequestRedirection resource injectionhttps://agentprime.io/advisories/CVE-2026-5414/https://agentprime.io/advisories/CVE-2026-5414/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 18:00:16 GMTCVECVE-2026-5031: BichitroGan ISP Billing Software Endpoint users-view resource injectionhttps://agentprime.io/advisories/CVE-2026-5031/https://agentprime.io/advisories/CVE-2026-5031/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 29 Mar 2026 04:30:11 GMTCVECVE-2026-3693: Shy2593666979 AgentChat User Endpoint user.py update_user_info resource injectionhttps://agentprime.io/advisories/CVE-2026-3693/https://agentprime.io/advisories/CVE-2026-3693/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 08 Mar 2026 00:32:08 GMTCVEEverShop is vulnerable to Unauthorized Order Information Access (IDOR)https://agentprime.io/advisories/GHSA-c73g-mx2w-cc93/https://agentprime.io/advisories/GHSA-c73g-mx2w-cc93/@evershop/evershop <=2.1.0, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sun, 09 Nov 2025 21:30:16 GMTnpm@evershop/evershopSkuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoicehttps://agentprime.io/advisories/GHSA-fqq7-h225-8w6h/https://agentprime.io/advisories/GHSA-fqq7-h225-8w6h/yungifez/skuul <=2.6.4, no fixed version yet. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sun, 09 Nov 2025 09:30:15 GMTPackagistyungifez/skuulCVE-2025-12270: LearnHouse Student Assignment Submission sub_file resource injectionhttps://agentprime.io/advisories/CVE-2025-12270/https://agentprime.io/advisories/CVE-2025-12270/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 12:02:07 GMTCVECVE-2025-43491: Poly Lens Desktop Application – Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-43491/https://agentprime.io/advisories/CVE-2025-43491/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:29:47 GMTCVECVE-2025-9619: E4 Sistemas Mercatus ERP id resource injectionhttps://agentprime.io/advisories/CVE-2025-9619/https://agentprime.io/advisories/CVE-2025-9619/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 04:02:06 GMTCVExxl-job Jobs Handler remove function allows improper control of resource identifiers via ID parameterhttps://agentprime.io/advisories/GHSA-gjx6-h8hm-c9rq/https://agentprime.io/advisories/GHSA-gjx6-h8hm-c9rq/com.xuxueli:xxl-job-admin <3.2.0, fixed in 3.2.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 21 Aug 2025 00:30:20 GMTMavencom.xuxueli:xxl-job-adminxxl-job Vulnerable to Resource Injection and Authorization Bypass Through User-Controlled Keyhttps://agentprime.io/advisories/GHSA-6rq7-m52p-8pqg/https://agentprime.io/advisories/GHSA-6rq7-m52p-8pqg/com.xuxueli:xxl-job-admin <3.2.0, fixed in 3.2.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 21 Aug 2025 00:30:20 GMTMavencom.xuxueli:xxl-job-adminCVE-2025-8793: LitmusChaos Litmus resource injectionhttps://agentprime.io/advisories/CVE-2025-8793/https://agentprime.io/advisories/CVE-2025-8793/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Aug 2025 04:02:06 GMTCVECVE-2025-6534: xxyopen/201206030 novel-plus File FileController.java remove resource injectionhttps://agentprime.io/advisories/CVE-2025-6534/https://agentprime.io/advisories/CVE-2025-6534/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 00:31:05 GMTCVECVE-2025-2410: Admin Authorized Port (iptables) manipulation (open/close/disable ports)https://agentprime.io/advisories/CVE-2025-2410/https://agentprime.io/advisories/CVE-2025-2410/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 17:32:35 GMTCVECVE-2025-3855: CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injectionhttps://agentprime.io/advisories/CVE-2025-3855/https://agentprime.io/advisories/CVE-2025-3855/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Apr 2025 00:31:09 GMTCVECVE-2025-0756: Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')https://agentprime.io/advisories/CVE-2025-0756/https://agentprime.io/advisories/CVE-2025-0756/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:23:19 GMTCVEcriticalCVE-2025-3405: FCJ Venture Builder appclientefiel HTTP GET Request ObterPedido resource injectionhttps://agentprime.io/advisories/CVE-2025-3405/https://agentprime.io/advisories/CVE-2025-3405/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 03:31:10 GMTCVECVE-2025-2125: Control iD RH iD PDF Document companyId resource injectionhttps://agentprime.io/advisories/CVE-2025-2125/https://agentprime.io/advisories/CVE-2025-2125/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 09 Mar 2025 16:00:07 GMTCVECVE-2025-1645: Benner Connecta EditarLogado resource injectionhttps://agentprime.io/advisories/CVE-2025-1645/https://agentprime.io/advisories/CVE-2025-1645/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 02:00:09 GMTCVECVE-2025-1642: Benner ModernaNet GetImageMedico resource injectionhttps://agentprime.io/advisories/CVE-2025-1642/https://agentprime.io/advisories/CVE-2025-1642/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 00:31:04 GMTCVECVE-2025-1575: Harpia DiagSystem atualatendimento_jpeg.php resource injectionhttps://agentprime.io/advisories/CVE-2025-1575/https://agentprime.io/advisories/CVE-2025-1575/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Feb 2025 04:00:08 GMTCVECVE-2024-5706: Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')https://agentprime.io/advisories/CVE-2024-5706/https://agentprime.io/advisories/CVE-2024-5706/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 22:49:46 GMTCVECVE-2024-57971: eng KNOWAGE: DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before…https://agentprime.io/advisories/CVE-2024-57971/https://agentprime.io/advisories/CVE-2024-57971/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Feb 2025 00:00:00 GMTCVEcriticalCVE-2025-0625: CampCodes School Management Software Attachment resource injectionhttps://agentprime.io/advisories/CVE-2025-0625/https://agentprime.io/advisories/CVE-2025-0625/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jan 2025 00:31:05 GMTCVECVE-2023-6605: Ffmpeg: dash playlist ssrf vulnerability in ffmpeghttps://agentprime.io/advisories/CVE-2023-6605/https://agentprime.io/advisories/CVE-2023-6605/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jan 2025 16:42:04 GMTCVE