agentprime: Weak cryptography or TLSEvery new Weak cryptography or TLS Advisory and CVE.https://agentprime.io/CVE-2026-122267: Improper signature verification in Chainguard MinIOhttps://agentprime.io/advisories/CVE-2026-122267/https://agentprime.io/advisories/CVE-2026-122267/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:00:11 GMTCVECVE-2026-111494: Incorrect validation of TLS certificates in the MatchPoint Android apphttps://agentprime.io/advisories/CVE-2026-111494/https://agentprime.io/advisories/CVE-2026-111494/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:58:02 GMTCVEcriticalCVE-2026-116790: FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITYhttps://agentprime.io/advisories/CVE-2026-116790/https://agentprime.io/advisories/CVE-2026-116790/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:40:51 GMTCVEcriticalCVE-2026-116789: FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverhttps://agentprime.io/advisories/CVE-2026-116789/https://agentprime.io/advisories/CVE-2026-116789/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:29:17 GMTCVECVE-2026-96453: Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificateshttps://agentprime.io/advisories/CVE-2026-96453/https://agentprime.io/advisories/CVE-2026-96453/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:15:42 GMTCVECVE-2026-93998: Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuerhttps://agentprime.io/advisories/CVE-2026-93998/https://agentprime.io/advisories/CVE-2026-93998/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:15:33 GMTCVECVE-2026-61813: ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::downloadhttps://agentprime.io/advisories/CVE-2026-61813/https://agentprime.io/advisories/CVE-2026-61813/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:48:15 GMTCVECVE-2026-117691: Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter nameshttps://agentprime.io/advisories/CVE-2026-117691/https://agentprime.io/advisories/CVE-2026-117691/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:27:23 GMTCVEcriticalCVE-2026-109408: vault-java-driver: SslConfig silently disables requested TLS verificationhttps://agentprime.io/advisories/CVE-2026-109408/https://agentprime.io/advisories/CVE-2026-109408/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 07:36:07 GMTCVECVE-2026-33965: Improper certificate validation in Samsung Semiconductor Exynos 1080 and othershttps://agentprime.io/advisories/CVE-2026-33965/https://agentprime.io/advisories/CVE-2026-33965/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:37:56 GMTCVECVE-2026-122318: Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificateshttps://agentprime.io/advisories/CVE-2026-122318/https://agentprime.io/advisories/CVE-2026-122318/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:17 GMTCVECVE-2026-54373: VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Confighttps://agentprime.io/advisories/CVE-2026-54373/https://agentprime.io/advisories/CVE-2026-54373/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:51:30 GMTCVECVE-2026-54372: VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validationhttps://agentprime.io/advisories/CVE-2026-54372/https://agentprime.io/advisories/CVE-2026-54372/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:50:12 GMTCVECVE-2026-102894: GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeoverhttps://agentprime.io/advisories/CVE-2026-102894/https://agentprime.io/advisories/CVE-2026-102894/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:18:29 GMTCVEcriticalCVE-2026-110281: Multiple vulnerabilities that affects IBM Db2 Genius Hubhttps://agentprime.io/advisories/CVE-2026-110281/https://agentprime.io/advisories/CVE-2026-110281/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:58:21 GMTCVECVE-2026-115758: SumatraPDF: TLS hostname validation disabled in `HttpGet()`https://agentprime.io/advisories/CVE-2026-115758/https://agentprime.io/advisories/CVE-2026-115758/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:44:55 GMTCVECVE-2026-121638: WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attackshttps://agentprime.io/advisories/CVE-2026-121638/https://agentprime.io/advisories/CVE-2026-121638/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 14:44:14 GMTCVEcriticalCVE-2026-121970: Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgeryhttps://agentprime.io/advisories/CVE-2026-121970/https://agentprime.io/advisories/CVE-2026-121970/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 13:01:41 GMTCVECVE-2026-121147: Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile applicationhttps://agentprime.io/advisories/CVE-2026-121147/https://agentprime.io/advisories/CVE-2026-121147/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 12:43:17 GMTCVECVE-2026-110021: Missing GSDX SignatureValue verificationhttps://agentprime.io/advisories/CVE-2026-110021/https://agentprime.io/advisories/CVE-2026-110021/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 09:19:31 GMTCVECVE-2026-87043: sys_rand_get() silently returns an unwritten buffer when the entropy device is not readyhttps://agentprime.io/advisories/CVE-2026-87043/https://agentprime.io/advisories/CVE-2026-87043/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:08 GMTCVECVE-2026-121606: Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verificationhttps://agentprime.io/advisories/CVE-2026-121606/https://agentprime.io/advisories/CVE-2026-121606/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 01:00:26 GMTCVEcriticalCVE-2026-121565: Tanium addressed an improper certificate validation vulnerability in multiple productshttps://agentprime.io/advisories/CVE-2026-121565/https://agentprime.io/advisories/CVE-2026-121565/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:17:22 GMTCVECVE-2026-121109: Weak encryption in Google Chromehttps://agentprime.io/advisories/CVE-2026-121109/https://agentprime.io/advisories/CVE-2026-121109/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 20:42:53 GMTCVECVE-2026-120734: Cleartext transmission of sensitive information in Devolutions Serverhttps://agentprime.io/advisories/CVE-2026-120734/https://agentprime.io/advisories/CVE-2026-120734/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 20:37:06 GMTCVEKeycloak has authentication bypass via jwt algorithm confusionhttps://agentprime.io/advisories/GHSA-j97h-3f8r-mrjr/https://agentprime.io/advisories/GHSA-j97h-3f8r-mrjr/org.keycloak:keycloak-services <26.6.4, fixed in 26.6.4. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 03 Nov 2026 17:24:27 GMTMavenorg.keycloak:keycloak-servicesCVE-2026-121624: Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validationhttps://agentprime.io/advisories/CVE-2026-121624/https://agentprime.io/advisories/CVE-2026-121624/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 17:13:52 GMTCVECVE-2026-115714: Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connectionshttps://agentprime.io/advisories/CVE-2026-115714/https://agentprime.io/advisories/CVE-2026-115714/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 16:44:18 GMTCVECVE-2026-121553: Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())https://agentprime.io/advisories/CVE-2026-121553/https://agentprime.io/advisories/CVE-2026-121553/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:11 GMTCVECVE-2026-121452: bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Servicehttps://agentprime.io/advisories/CVE-2026-121452/https://agentprime.io/advisories/CVE-2026-121452/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:01 GMTCVECVE-2026-121392: FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificatehttps://agentprime.io/advisories/CVE-2026-121392/https://agentprime.io/advisories/CVE-2026-121392/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:27:57 GMTCVEcriticalCVE-2026-91899: Improper signature verification in Dell Alienware Command Center (AWCC)https://agentprime.io/advisories/CVE-2026-91899/https://agentprime.io/advisories/CVE-2026-91899/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 20:02:44 GMTCVECVE-2026-91897: Improper certificate validation in Dell Alienware Command Center (AWCC)https://agentprime.io/advisories/CVE-2026-91897/https://agentprime.io/advisories/CVE-2026-91897/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 20:00:51 GMTCVECVE-2026-91898: Improper signature verification in Dell Alienware Command Center (AWCC)https://agentprime.io/advisories/CVE-2026-91898/https://agentprime.io/advisories/CVE-2026-91898/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 19:54:58 GMTCVECVE-2026-120459: python-jose through 3.5.0 Authentication Bypass via Empty HMAC Keyhttps://agentprime.io/advisories/CVE-2026-120459/https://agentprime.io/advisories/CVE-2026-120459/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:15 GMTCVEcriticalCVE-2026-91905: Improper signature verification in Dell OpenManage Enterprisehttps://agentprime.io/advisories/CVE-2026-91905/https://agentprime.io/advisories/CVE-2026-91905/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 12:38:01 GMTCVECVE-2026-91908: Improper signature verification in Dell OpenManage Enterprisehttps://agentprime.io/advisories/CVE-2026-91908/https://agentprime.io/advisories/CVE-2026-91908/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 12:23:17 GMTCVECVE-2026-117549: @fastify/secure-session vulnerable to signature verification bypass via cookie signature removalhttps://agentprime.io/advisories/CVE-2026-117549/https://agentprime.io/advisories/CVE-2026-117549/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 10:26:30 GMTCVECVE-2026-120223: Oray Pugongying X5 Pro Session ID session.lua session_get random valueshttps://agentprime.io/advisories/CVE-2026-120223/https://agentprime.io/advisories/CVE-2026-120223/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 10:00:19 GMTCVECVE-2026-116474: Gitea Actions job token spoofing of instance-signed commitshttps://agentprime.io/advisories/CVE-2026-116474/https://agentprime.io/advisories/CVE-2026-116474/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:38 GMTCVECVE-2026-120250: OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connectionshttps://agentprime.io/advisories/CVE-2026-120250/https://agentprime.io/advisories/CVE-2026-120250/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:14 GMTCVECVE-2026-118147: Visual Studio Spoofing Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118147/https://agentprime.io/advisories/CVE-2026-118147/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 18:13:37 GMTCVECVE-2026-117681: Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyonehttps://agentprime.io/advisories/CVE-2026-117681/https://agentprime.io/advisories/CVE-2026-117681/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 08:57:35 GMTCVEForge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storehttps://agentprime.io/advisories/GHSA-4487-j8r4-4g2f/https://agentprime.io/advisories/GHSA-4487-j8r4-4g2f/node-forge <1.4.1, fixed in 1.4.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 23:02:14 GMTnpmnode-forgeForge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13https://agentprime.io/advisories/GHSA-5x38-2vff-x55p/https://agentprime.io/advisories/GHSA-5x38-2vff-x55p/node-forge <1.4.1, fixed in 1.4.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 23:01:46 GMTnpmnode-forgeAdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgeryhttps://agentprime.io/advisories/GHSA-wm25-49w3-5qrg/https://agentprime.io/advisories/GHSA-wm25-49w3-5qrg/adminneo-org/adminneo <5.5.1, fixed in 5.5.1. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 22:51:29 GMTPackagistadminneo-org/adminneoCVE-2026-63182: LightSAML: Signature reference wrapping permits unsigned assertion claimshttps://agentprime.io/advisories/CVE-2026-63182/https://agentprime.io/advisories/CVE-2026-63182/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:46:38 GMTCVEssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundaryhttps://agentprime.io/advisories/GHSA-7gw2-hphm-c5px/https://agentprime.io/advisories/GHSA-7gw2-hphm-c5px/ssl_verify_fun >=1.0.1, <1.1.8, fixed in 1.1.8. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 20:22:16 GMTHexssl_verify_funcriticalCVE-2026-118697: Improper certificate validation in JetBrains Toolbox App and othershttps://agentprime.io/advisories/CVE-2026-118697/https://agentprime.io/advisories/CVE-2026-118697/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:31:26 GMTCVEcriticalCVE-2026-112816: Improper certificate validation in the HTTPS listener in LXDhttps://agentprime.io/advisories/CVE-2026-112816/https://agentprime.io/advisories/CVE-2026-112816/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 16:42:06 GMTCVEcritical