agentprime: Information disclosureEvery new Information disclosure Advisory and CVE.https://agentprime.io/CVE-2026-123988: SililaWijesinghe Food Ordering System admin exposure of information through directory listinghttps://agentprime.io/advisories/CVE-2026-123988/https://agentprime.io/advisories/CVE-2026-123988/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 14:00:25 GMTCVECVE-2026-119465: WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerabilityhttps://agentprime.io/advisories/CVE-2026-119465/https://agentprime.io/advisories/CVE-2026-119465/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 09:28:22 GMTCVECVE-2026-120548: YML for Yandex Market <= 5.10.0 - Unauthenticated Sensitive Information Exposure through Log File via 'y4ym_check_action' Parameter via admin-post.phphttps://agentprime.io/advisories/CVE-2026-120548/https://agentprime.io/advisories/CVE-2026-120548/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 09:25:45 GMTCVECVE-2026-121779: WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerabilityhttps://agentprime.io/advisories/CVE-2026-121779/https://agentprime.io/advisories/CVE-2026-121779/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 08:43:09 GMTCVECVE-2026-118801: aBlocks <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' Shortcodehttps://agentprime.io/advisories/CVE-2026-118801/https://agentprime.io/advisories/CVE-2026-118801/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 06:39:41 GMTCVECVE-2026-93370: Paystack WooCommerce Payment Gateway <= 5.8.5 - Unauthenticated Sensitive Information Exposure in 'key' Parameter on order-pay Endpointhttps://agentprime.io/advisories/CVE-2026-93370/https://agentprime.io/advisories/CVE-2026-93370/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 06:39:36 GMTCVECVE-2026-17322: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17322/https://agentprime.io/advisories/CVE-2026-17322/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:33:14 GMTCVECVE-2026-17231: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17231/https://agentprime.io/advisories/CVE-2026-17231/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:32:19 GMTCVECVE-2026-17215: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17215/https://agentprime.io/advisories/CVE-2026-17215/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:32:15 GMTCVECVE-2026-17144: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17144/https://agentprime.io/advisories/CVE-2026-17144/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:31:59 GMTCVECVE-2026-17128: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17128/https://agentprime.io/advisories/CVE-2026-17128/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:31:50 GMTCVECVE-2026-17114: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17114/https://agentprime.io/advisories/CVE-2026-17114/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:31:48 GMTCVECVE-2026-17098: Multiple Vulnerabilities in IBM API Connecthttps://agentprime.io/advisories/CVE-2026-17098/https://agentprime.io/advisories/CVE-2026-17098/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 04:31:45 GMTCVECVE-2026-120520: Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameterhttps://agentprime.io/advisories/CVE-2026-120520/https://agentprime.io/advisories/CVE-2026-120520/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 02:29:12 GMTCVECVE-2026-68933: Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storagehttps://agentprime.io/advisories/CVE-2026-68933/https://agentprime.io/advisories/CVE-2026-68933/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 21:13:24 GMTCVECVE-2026-123787: nexmoe VidBee Local HTTP Service local-api.ts information disclosurehttps://agentprime.io/advisories/CVE-2026-123787/https://agentprime.io/advisories/CVE-2026-123787/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 21:00:26 GMTCVECVE-2026-71863: SecureDrop: Onion Service client auth credentials copied to Monitor Serverhttps://agentprime.io/advisories/CVE-2026-71863/https://agentprime.io/advisories/CVE-2026-71863/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:58:10 GMTCVECVE-2026-62850: FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secretshttps://agentprime.io/advisories/CVE-2026-62850/https://agentprime.io/advisories/CVE-2026-62850/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 17:04:28 GMTCVECVE-2026-62852: FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Keyhttps://agentprime.io/advisories/CVE-2026-62852/https://agentprime.io/advisories/CVE-2026-62852/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 17:03:33 GMTCVECVE-2026-62851: FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)https://agentprime.io/advisories/CVE-2026-62851/https://agentprime.io/advisories/CVE-2026-62851/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 17:01:44 GMTCVECVE-2026-62856: FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Queryhttps://agentprime.io/advisories/CVE-2026-62856/https://agentprime.io/advisories/CVE-2026-62856/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 17:00:33 GMTCVECVE-2026-66984: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-66984/https://agentprime.io/advisories/CVE-2026-66984/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 15:34:55 GMTCVECVE-2026-106019: Sensitive information in log files in Johnson Controls C-CURE 9000, Victorhttps://agentprime.io/advisories/CVE-2026-106019/https://agentprime.io/advisories/CVE-2026-106019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 14:21:36 GMTCVECVE-2026-35112: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-35112/https://agentprime.io/advisories/CVE-2026-35112/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 13:26:02 GMTCVECVE-2026-35113: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-35113/https://agentprime.io/advisories/CVE-2026-35113/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 13:23:27 GMTCVECVE-2026-35111: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-35111/https://agentprime.io/advisories/CVE-2026-35111/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 13:13:54 GMTCVECVE-2026-35114: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-35114/https://agentprime.io/advisories/CVE-2026-35114/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 13:12:13 GMTCVECVE-2026-35115: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-35115/https://agentprime.io/advisories/CVE-2026-35115/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 13:09:00 GMTCVECVE-2026-123316: Sensitive information in log files in JetBrains Junie CLIhttps://agentprime.io/advisories/CVE-2026-123316/https://agentprime.io/advisories/CVE-2026-123316/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 10:28:04 GMTCVECVE-2026-123290: Information disclosure in JetBrains Datalorehttps://agentprime.io/advisories/CVE-2026-123290/https://agentprime.io/advisories/CVE-2026-123290/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 10:27:53 GMTCVECVE-2026-120415: undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect strippinghttps://agentprime.io/advisories/CVE-2026-120415/https://agentprime.io/advisories/CVE-2026-120415/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 10:10:48 GMTCVECVE-2026-108018: BigFix Mobile is affected by sensitive information disclosurehttps://agentprime.io/advisories/CVE-2026-108018/https://agentprime.io/advisories/CVE-2026-108018/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 08:27:09 GMTCVECVE-2026-119499: WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerabilityhttps://agentprime.io/advisories/CVE-2026-119499/https://agentprime.io/advisories/CVE-2026-119499/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 08:00:30 GMTCVECVE-2026-118188: PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosurehttps://agentprime.io/advisories/CVE-2026-118188/https://agentprime.io/advisories/CVE-2026-118188/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 06:00:28 GMTCVECVE-2026-110390: FlexNet Beacon Missing Authentication Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-110390/https://agentprime.io/advisories/CVE-2026-110390/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:32:44 GMTCVECVE-2026-119757: BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosurehttps://agentprime.io/advisories/CVE-2026-119757/https://agentprime.io/advisories/CVE-2026-119757/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:44:41 GMTCVEcriticalCVE-2026-103021: OpenEMR: Username Enumeration via Pre-Authentication User Settings Loadinghttps://agentprime.io/advisories/CVE-2026-103021/https://agentprime.io/advisories/CVE-2026-103021/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 20:06:36 GMTCVECVE-2026-103020: OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versionshttps://agentprime.io/advisories/CVE-2026-103020/https://agentprime.io/advisories/CVE-2026-103020/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 20:05:26 GMTCVECVE-2026-65983: OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroothttps://agentprime.io/advisories/CVE-2026-65983/https://agentprime.io/advisories/CVE-2026-65983/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:52:57 GMTCVECVE-2026-19134: Observable discrepancy in OpenText Directory Services (OTDS)https://agentprime.io/advisories/CVE-2026-19134/https://agentprime.io/advisories/CVE-2026-19134/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:40:08 GMTCVECVE-2026-116780: FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicinghttps://agentprime.io/advisories/CVE-2026-116780/https://agentprime.io/advisories/CVE-2026-116780/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:34:21 GMTCVECVE-2026-123197: WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /fileshttps://agentprime.io/advisories/CVE-2026-123197/https://agentprime.io/advisories/CVE-2026-123197/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:16:35 GMTCVECVE-2026-118494: Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9https://agentprime.io/advisories/CVE-2026-118494/https://agentprime.io/advisories/CVE-2026-118494/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:02:09 GMTCVECVE-2026-54145: OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)https://agentprime.io/advisories/CVE-2026-54145/https://agentprime.io/advisories/CVE-2026-54145/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:33:32 GMTCVECVE-2026-49405: OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event datahttps://agentprime.io/advisories/CVE-2026-49405/https://agentprime.io/advisories/CVE-2026-49405/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:33:23 GMTCVECVE-2026-54144: OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesturehttps://agentprime.io/advisories/CVE-2026-54144/https://agentprime.io/advisories/CVE-2026-54144/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:14:46 GMTCVECVE-2026-73580: Apache OFBiz: Unauthenticated HR organization and employee disclosurehttps://agentprime.io/advisories/CVE-2026-73580/https://agentprime.io/advisories/CVE-2026-73580/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:10:09 GMTCVECVE-2026-83538: Apache OFBiz: Unauthenticated disclosure through HR, Catalog, and Order Manager helpershttps://agentprime.io/advisories/CVE-2026-83538/https://agentprime.io/advisories/CVE-2026-83538/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:00:57 GMTCVECVE-2026-123059: Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Chartshttps://agentprime.io/advisories/CVE-2026-123059/https://agentprime.io/advisories/CVE-2026-123059/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:13:17 GMTCVECVE-2026-123047: Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Chartshttps://agentprime.io/advisories/CVE-2026-123047/https://agentprime.io/advisories/CVE-2026-123047/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 12:11:12 GMTCVE