# CWE-1104.

Every Advisory and CVE whose sources give the weakness CWE-1104, newest first.

## Records, newest first

- [Use of End-of-Life components in mH-DEVELOPER](https://agentprime.io/advisories/CVE-2026-82935.md)
  `CVE-2026-82935` · CVE record: F&F Filipowski mH-DEVELOPER · CVSS 6.9 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-1104
- [HCL Hive is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-21753.md)
  `CVE-2026-21753` · CVE record: HCL Software Hive · CVSS 4.2 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-1104
- [HP Easy Start for macOS - Security Update](https://agentprime.io/advisories/CVE-2026-12554.md)
  `CVE-2026-12554` · CVE record: HP Inc HP Easy Start for macOS · CVSS 8.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-1104
- [HCL Hive is affected by a use of vulnerable third-party components](https://agentprime.io/advisories/CVE-2026-21752.md)
  `CVE-2026-21752` · CVE record: HCLSoftware HCL Hive · CVSS 7.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-1104
- [Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label](https://agentprime.io/advisories/CVE-2026-66788.md)
  `CVE-2026-66788` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-1104
- [cloudflare/pages-action is deprecated — migration required by September 18th, 2026](https://agentprime.io/advisories/CVE-2026-11325.md)
  `CVE-2026-11325` · CVE record: Cloudflare https\://github.com/cloudflare/pages-action · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2026 · Tags: Command injection, CWE-1104
- [TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99](https://agentprime.io/advisories/CVE-2026-16634.md)
  `CVE-2026-16634` · CVE record: FELIPE TOML::XS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-1104, CWE-1395
- [Oracle Corporation Oracle Platform Security for Java: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion…](https://agentprime.io/advisories/CVE-2026-60368.md)
  `CVE-2026-60368` · CVE record: Oracle Corporation Oracle Platform Security for Java · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-1104
- [HCL MyCloud was affected by Using Components with Known Vulnerability](https://agentprime.io/advisories/CVE-2026-56580.md)
  `CVE-2026-56580` · CVE record: HCLSoftware MyCloud · CVSS 2.2 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-1104
- [Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library](https://agentprime.io/advisories/CVE-2026-3031.md)
  `CVE-2026-3031` · CVE record: TOKUHIROM Image::EPEG · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-1104
- [HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service](https://agentprime.io/advisories/CVE-2023-37524.md)
  `CVE-2023-37524` · CVE record: HCLSoftware Traveler for Microsoft Outlook · CVSS 7.7 High · Not analysed yet · Published 27 Jun 2026 · Tags: CWE-1104
- [HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery](https://agentprime.io/advisories/CVE-2026-21821.md)
  `CVE-2026-21821` · CVE record: HCLSoftware BigFix SCM Reporting · CVSS 8.3 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-1104
- [Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection](https://agentprime.io/advisories/CVE-2026-41468.md)
  `CVE-2026-41468` · CVE record: Beghelli SicuroWeb (Sicuro24) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-1104
- [HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability](https://agentprime.io/advisories/CVE-2025-55277.md)
  `CVE-2025-55277` · CVE record: HCL Aftermarket DPC · CVSS 2.6 Low · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-1104
- [Intel(R) Processor Identification Utility: Use of unmaintained third party components for some Intel(R) Processor Identification…](https://agentprime.io/advisories/CVE-2025-20010.md)
  `CVE-2025-20010` · CVE record: Intel(R) Processor Identification Utility · CVSS 8.5 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-1104
- [Incorrect Content-Type Header](https://agentprime.io/advisories/CVE-2025-12104.md)
  `CVE-2025-12104` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-1104
- [HCL MyXalytics is affected by the use of vulnerable/outdated versions](https://agentprime.io/advisories/CVE-2025-52658.md)
  `CVE-2025-52658` · CVE record: HCL Software MyXalytics · CVSS 3.5 Low · Not analysed yet · Published 3 Oct 2025 · Tags: CWE-1021, CWE-1104
- [Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes](https://agentprime.io/advisories/CVE-2025-34193.md)
  `CVE-2025-34193` · CVE record: Vasion Print Virtual Appliance Host and 1 more · CVSS 7.1 High · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-755, CWE-1104
- [Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version](https://agentprime.io/advisories/CVE-2025-34192.md)
  `CVE-2025-34192` · CVE record: Vasion Print Virtual Appliance Host and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-1104
- [Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4](https://agentprime.io/advisories/CVE-2025-10220.md)
  `CVE-2025-10220` · CVE record: AxxonSoft AxxonOne C-Werk · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2025 · Tags: CWE-1104
- [Missing encryption of sensitive data in Bosch Rexroth AG ctrlX OS - Setup](https://agentprime.io/advisories/CVE-2025-48862.md)
  `CVE-2025-48862` · CVE record: Bosch Rexroth AG ctrlX OS - Setup · CVSS 7.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: Weak cryptography or TLS, CWE-1104
- [Radiflow iSAP Smart Collector Linux distribution unmaintained](https://agentprime.io/advisories/CVE-2025-3497.md)
  `CVE-2025-3497` · CVE record: Radiflow iSAP Smart Collector · CVSS 8.7 High · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-1104
- [BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities](https://agentprime.io/advisories/CVE-2025-40906.md)
  `CVE-2025-40906` · CVE record: MONGODB BSON::XS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 May 2025 · Tags: Memory corruption, CWE-1104, CWE-1395
- [CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.](https://agentprime.io/advisories/CVE-2024-11999.md)
  `CVE-2024-11999` · CVE record: Schneider Electric Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime and 1 more · CVSS 8.7 High · Not analysed yet · Published 17 Dec 2024 · Tags: CWE-1104
- [Deserialization of untrusted data in Sophos Intercept X](https://agentprime.io/advisories/CVE-2024-8885.md)
  `CVE-2024-8885` · CVE record: Sophos Sophos Intercept X · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2024 · Tags: Insecure deserialization, CWE-1104
- [Azure Storage Movement Client Library Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-32f8-hmr3-7vxg.md)
  `GHSA-32f8-hmr3-7vxg`, `CVE-2024-35252` · NuGet `Microsoft.Azure.Storage.DataMovement`: affected `<2.0.5`, fixed in `2.0.5` · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-1104
- [Integer overflow in URI leading to potential host spoofing](https://agentprime.io/advisories/CVE-2024-21631.md)
  `CVE-2024-21631` · CVE record: vapor vapor · CVSS 6.5 Medium · Not analysed yet · Published 3 Jan 2024 · Tags: Memory corruption, CWE-20, CWE-1104
- [Remote Code Execution (RCE) Vulnerability](https://agentprime.io/advisories/CVE-2023-7102.md)
  `CVE-2023-7102` · CVE record: Barracuda Networks Inc. Barracuda ESG Appliance · No CVSS score · EPSS 0.45 · Not analysed yet · Published 24 Dec 2023 · Tags: CWE-1104
- [Kibana Reporting vulnerabilities](https://agentprime.io/advisories/CVE-2021-22142.md)
  `CVE-2021-22142` · CVE record: Elastic Kibana · CVSS 6.6 Medium · Not analysed yet · Published 22 Nov 2023 · Tags: CWE-1104
- [An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.](https://agentprime.io/advisories/CVE-2022-46871.md)
  `CVE-2022-46871` · CVE record: Mozilla Firefox · CVSS 8.8 High · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-1104
- [typemap is Unmaintained](https://agentprime.io/advisories/GHSA-vfv3-9w6v-23jp.md)
  `GHSA-vfv3-9w6v-23jp`, `RUSTSEC-2019-0039` · crates.io `typemap`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 16 Sept 2022 · Tags: CWE-1104
- [traitobject is Unmaintained](https://agentprime.io/advisories/GHSA-pp8r-vv2j-9j5v.md)
  `GHSA-pp8r-vv2j-9j5v`, `RUSTSEC-2021-0144` · crates.io `traitobject`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 16 Sept 2022 · Tags: CWE-1104
- [Outdated Static Dependency in vue-moment](https://agentprime.io/advisories/GHSA-hrpp-f84w-xhfg.md)
  `GHSA-hrpp-f84w-xhfg` · npm `vue-moment`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-1104

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1104>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1104/>. Everything for agents: <https://agentprime.io/llms.txt>.