agentprime: Information disclosure

CVE-2026-110390: FlexNet Beacon Missing Authentication Vulnerability

Thu, 05 Nov 2026 22:32:44 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119757: BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

Thu, 05 Nov 2026 21:44:41 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103021: OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading

Thu, 05 Nov 2026 20:06:36 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103020: OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions

Thu, 05 Nov 2026 20:05:26 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65983: OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot

Thu, 05 Nov 2026 19:52:57 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19134: Observable discrepancy in OpenText Directory Services (OTDS)

Thu, 05 Nov 2026 19:40:08 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116780: FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing

Thu, 05 Nov 2026 19:34:21 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123197: WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files

Thu, 05 Nov 2026 18:16:35 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118494: Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9

Thu, 05 Nov 2026 18:02:09 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54145: OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)

Thu, 05 Nov 2026 16:33:32 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49405: OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data

Thu, 05 Nov 2026 16:33:23 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54144: OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture

Thu, 05 Nov 2026 16:14:46 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73580: Apache OFBiz: Unauthenticated HR organization and employee disclosure

Thu, 05 Nov 2026 14:10:09 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83538: Apache OFBiz: Unauthenticated disclosure through HR, Catalog, and Order Manager helpers

Thu, 05 Nov 2026 14:00:57 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123059: Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

Thu, 05 Nov 2026 13:13:17 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123047: Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

Thu, 05 Nov 2026 12:11:12 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73101: Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults

Thu, 05 Nov 2026 11:52:25 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73100: Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors

Thu, 05 Nov 2026 11:50:50 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123036: Sensitive information in error messages in Red Hat ansible-core

Thu, 05 Nov 2026 09:38:31 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93389: LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

Thu, 05 Nov 2026 04:48:06 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122301: Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Response

Thu, 05 Nov 2026 02:25:07 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122154: purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure

Thu, 05 Nov 2026 01:30:31 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122028: NST Labs Tech Nstbrowser Local Agent API info information disclosure

Wed, 04 Nov 2026 22:15:18 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102280: Sandboxie-Plus: Sandbox containment bypass

Wed, 04 Nov 2026 21:54:47 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121747: nvm prints the contents of any readable file through a symlinked .nvmrc

Wed, 04 Nov 2026 21:30:32 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105702: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Wed, 04 Nov 2026 20:59:16 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104203: Traccar: Authentication bypass via path parameters exposes protected device media

Wed, 04 Nov 2026 20:47:02 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-71455: vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service

Wed, 04 Nov 2026 20:36:43 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14252: IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility

Wed, 04 Nov 2026 20:24:45 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121971: Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References

Wed, 04 Nov 2026 17:43:34 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

Wed, 04 Nov 2026 17:02:37 GMT

github.com/basekick-labs/arc <0.0.0-20260610131716-5dc8f53b70a3, fixed in 0.0.0-20260610131716-5dc8f53b70a3. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-91163: Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller

Wed, 04 Nov 2026 15:19:15 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121146: Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application

Wed, 04 Nov 2026 12:40:21 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90632: Apache OpenOffice: Local file inclusion via GStreamer plugin

Wed, 04 Nov 2026 11:05:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90627: Apache OpenOffice: Local file inclusion via SQL provider and flat file database references

Wed, 04 Nov 2026 11:03:29 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56065: WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability

Wed, 04 Nov 2026 08:00:16 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118637: Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode

Wed, 04 Nov 2026 06:00:28 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118523: EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override

Wed, 04 Nov 2026 06:00:28 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118404: Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDOR

Wed, 04 Nov 2026 06:00:27 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112244: Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points

Wed, 04 Nov 2026 06:00:26 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111962: WP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export File

Wed, 04 Nov 2026 06:00:25 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111740: Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure

Wed, 04 Nov 2026 06:00:25 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105191: WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log

Wed, 04 Nov 2026 06:00:24 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121618: Linksys E5600 Factory Quality Control fqc.cgi information disclosure

Wed, 04 Nov 2026 03:00:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114551: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability

Tue, 03 Nov 2026 23:47:41 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116666: Tanium addressed an information disclosure vulnerability in Discover.

Tue, 03 Nov 2026 22:18:00 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116665: Tanium addressed an information disclosure vulnerability in Discover.

Tue, 03 Nov 2026 22:17:23 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121175: Resource exposure in Google Chrome

Tue, 03 Nov 2026 20:43:01 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121130: Observable discrepancy in Google Chrome

Tue, 03 Nov 2026 20:42:58 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121138: Observable discrepancy in Google Chrome

Tue, 03 Nov 2026 20:42:56 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.