# CWE-1284.

Every Advisory and CVE whose sources give the weakness CWE-1284, newest first.

## Records, newest first (an older page)

- [Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.](https://agentprime.io/advisories/CVE-2023-20515.md)
  `CVE-2023-20515` · CVE record: AMD AMD Ryzen™ 3000 Series Desktop Processors and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1284
- [A logic issue was addressed with improved restrictions.](https://agentprime.io/advisories/CVE-2025-24100.md)
  `CVE-2025-24100` · CVE record: Apple macOS · CVSS 3.3 Low · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-1284
- [In Modem, there is a possible system crash due to improper input validation.](https://agentprime.io/advisories/CVE-2024-20149.md)
  `CVE-2024-20149` · CVE record: MediaTek, Inc. MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-1284
- [An issue in the DeviceloControl function of ITE Tech.](https://agentprime.io/advisories/CVE-2024-55407.md)
  `CVE-2024-55407` · CVE record · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-1284
- [netdevsim: prevent bad user input in nsim_dev_health_break_write()](https://agentprime.io/advisories/CVE-2024-56716.md)
  `CVE-2024-56716` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 29 Dec 2024 · Tags: CWE-1284
- [OPPO Store app include remote account token hijacking and sensitive information leakage](https://agentprime.io/advisories/CVE-2024-1610.md)
  `CVE-2024-1610` · CVE record: OPPO OPPO Store APP · CVSS 8.7 High · Not analysed yet · Published 18 Dec 2024 · Tags: Authentication bypass, CWE-1284
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2024-52901.md)
  `CVE-2024-52901` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1284
- [Business Logic Error in RestApp Inc.'s Online Ordering System](https://agentprime.io/advisories/CVE-2024-7488.md)
  `CVE-2024-7488` · CVE record: RestApp Inc. Online Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Memory corruption, CWE-1284
- [An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300.](https://agentprime.io/advisories/CVE-2024-39343.md)
  `CVE-2024-39343` · CVE record · CVSS 7.0 High · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-1284
- [Google Chrome: Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a…](https://agentprime.io/advisories/CVE-2024-9369.md)
  `CVE-2024-9369` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 27 Nov 2024 · Tags: CWE-1284
- [Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network.](https://agentprime.io/advisories/CVE-2024-47257.md)
  `CVE-2024-47257` · CVE record: Axis Communications AB AXIS Q6128-E PTZ Network Camera and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-1284
- [Input Validation Vulnerability exists in Arena® Input Analyzer](https://agentprime.io/advisories/CVE-2024-6068.md)
  `CVE-2024-6068` · CVE record: Rockwell Automation Arena Input Analyzer · CVSS 7.0 High · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-1284
- [An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ll_terminate_ind packet.](https://agentprime.io/advisories/CVE-2024-48290.md)
  `CVE-2024-48290` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 7 Nov 2024 · Tags: CWE-1284
- [Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series](https://agentprime.io/advisories/CVE-2024-7316.md)
  `CVE-2024-7316` · CVE record: Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-1284
- [Authentication bypass vulnerability on CIRCUTOR Q-SMT](https://agentprime.io/advisories/CVE-2024-8887.md)
  `CVE-2024-8887` · CVE record: CIRCUTOR CIRCUTOR Q-SMT · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-1284
- [BT: Unchecked user input in bap_broadcast_assistant](https://agentprime.io/advisories/CVE-2024-5931.md)
  `CVE-2024-5931` · CVE record: zephyrproject-rtos Zephyr · CVSS 6.3 Medium · Not analysed yet · Published 13 Sept 2024 · Tags: Memory corruption, CWE-1284
- [SourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input](https://agentprime.io/advisories/CVE-2024-8558.md)
  `CVE-2024-8558` · CVE record: SourceCodester Food Ordering Management System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2024 · Tags: CWE-1284
- [NVIDIA CUDA Toolkit: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may…](https://agentprime.io/advisories/CVE-2024-0111.md)
  `CVE-2024-0111` · CVE record: NVIDIA CUDA Toolkit · CVSS 4.4 Medium · Not analysed yet · Published 31 Aug 2024 · Tags: CWE-1284
- [Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting…](https://agentprime.io/advisories/CVE-2023-31310.md)
  `CVE-2023-31310` · CVE record: AMD AMD Radeon™ RX 6000 Series Graphics Cards and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-1284
- [Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to modify the PCIe® lane count and speed, potentially leading to a loss of availability.](https://agentprime.io/advisories/CVE-2023-31304.md)
  `CVE-2023-31304` · CVE record: AMD AMD Radeon™ RX 6000 Series Graphics Cards and 1 more · CVSS 2.3 Low · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-1284
- [Denial of Service in CLFS.sys](https://agentprime.io/advisories/CVE-2024-6768.md)
  `CVE-2024-6768` · CVE record: Microsoft Windows 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2024 · Tags: CWE-1284
- [A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) atta…](https://agentprime.io/advisories/CVE-2024-31957.md)
  `CVE-2024-31957` · CVE record · CVSS 6.2 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1284
- [A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check…](https://agentprime.io/advisories/CVE-2024-27360.md)
  `CVE-2024-27360` · CVE record · CVSS 6.0 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1284
- [phonenumber: panic on parsing crafted phonenumber inputs](https://agentprime.io/advisories/GHSA-mjw4-jj88-v687.md)
  `GHSA-mjw4-jj88-v687`, `CVE-2024-39697`, `RUSTSEC-2024-0369` · crates.io `phonenumber`: affected `>=0.3.3, <0.3.6`, fixed in `0.3.6` · CVSS 8.6 High · Not analysed yet · Published 7 Jul 2024 · Tags: Broken access control, Denial of service, CWE-392, CWE-1284
- [Communication DoS vulnerability](https://agentprime.io/advisories/CVE-2024-3036.md)
  `CVE-2024-3036` · CVE record: ABB 800xA Base · CVSS 6.9 Medium · Not analysed yet · Published 21 Jun 2024 · Tags: CWE-1284
- [Elevation of Privelage via symlinked file in Avast Antivirus](https://agentprime.io/advisories/CVE-2024-5102.md)
  `CVE-2024-5102` · CVE record: Avast Antivirus · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-1284
- [WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2024-24715.md)
  `CVE-2024-24715` · CVE record: The Events Calendar BookIt · CVSS 6.5 Medium · Not analysed yet · Published 17 May 2024 · Tags: CWE-1284
- [WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability](https://agentprime.io/advisories/CVE-2024-30527.md)
  `CVE-2024-30527` · CVE record: Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) · CVSS 7.5 High · Not analysed yet · Published 17 May 2024 · Tags: CWE-1284
- [SailPoint Identity Security Cloud Improper Access Control](https://agentprime.io/advisories/CVE-2024-3317.md)
  `CVE-2024-3317` · CVE record: SailPoint Identity Security Cloud · CVSS 6.5 Medium · Not analysed yet · Published 15 May 2024 · Tags: CWE-1284
- [Rapid7 Insight Agent Sensitive Key Exposed To Local Users](https://agentprime.io/advisories/CVE-2024-3185.md)
  `CVE-2024-3185` · CVE record: Rapid7 Insight Agent · CVSS 6.8 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: CWE-1284
- [A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with loca…](https://agentprime.io/advisories/CVE-2024-23593.md)
  `CVE-2024-23593` · CVE record: Lenovo Windows 7 and 8 PC Preloads · CVSS 6.7 Medium · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-1284
- [In SecurityCommand message after as security has been actived., there is a possible improper input validation.](https://agentprime.io/advisories/CVE-2023-52343.md)
  `CVE-2023-52343` · CVE record: Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000 · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-1284
- [Apache HTTP Server: HTTP response splitting](https://agentprime.io/advisories/CVE-2023-38709.md)
  `CVE-2023-38709` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-1284
- [Zoom Clients - Improper Input Validation](https://agentprime.io/advisories/CVE-2024-24690.md)
  `CVE-2024-24690` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 5.4 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-1284
- [A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device.](https://agentprime.io/advisories/CVE-2023-4518.md)
  `CVE-2023-4518` · CVE record: Hitachi Energy Relion670 · CVSS 6.5 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: CWE-1284
- [DoS via long hostnames](https://agentprime.io/advisories/CVE-2023-23549.md)
  `CVE-2023-23549` · CVE record: Checkmk GmbH Checkmk · CVSS 2.7 Low · Not analysed yet · Published 15 Nov 2023 · Tags: CWE-1284
- [Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received](https://agentprime.io/advisories/CVE-2023-36839.md)
  `CVE-2023-36839` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-1284
- [phonenumber: panic on parsing crafted RF3966 phonenumber inputs](https://agentprime.io/advisories/GHSA-whhr-7f2w-qqj2.md)
  `GHSA-whhr-7f2w-qqj2`, `CVE-2023-42444`, `RUSTSEC-2023-0082` · crates.io `phonenumber`: affected `>=0.0.0-0, <0.2.5 || >=0.3.0, <0.3.3`, fixed in `0.2.5`, `0.3.3` · CVSS 8.6 High · Not analysed yet · Published 19 Sept 2023 · Tags: CWE-248, CWE-392, CWE-1284
- [blurhash: panic on parsing crafted blurhash inputs](https://agentprime.io/advisories/GHSA-cxvp-82cq-57h2.md)
  `GHSA-cxvp-82cq-57h2`, `CVE-2023-42447`, `RUSTSEC-2023-0083` · crates.io `blurhash`: affected `>=0.0.0-0, <0.2.0`, fixed in `0.2.0` · CVSS 8.6 High · Not analysed yet · Published 19 Sept 2023 · Tags: CWE-248, CWE-392, CWE-1284
- [SourceCodester Card Holder Management System Minus Value unknown vulnerability](https://agentprime.io/advisories/CVE-2023-4439.md)
  `CVE-2023-4439` · CVE record: SourceCodester Card Holder Management System · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2023 · Tags: CWE-1284
- [OMRON Corporation CJ2M CPU Unit: Denial-of-service (DoS) vulnerability due to improper validation of specified type of…](https://agentprime.io/advisories/CVE-2023-38744.md)
  `CVE-2023-38744` · CVE record: OMRON Corporation CJ2M CPU Unit and 2 more · No CVSS score · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-1284
- [Vulnerability of unstrict data verification and parameter check.](https://agentprime.io/advisories/CVE-2021-46893.md)
  `CVE-2021-46893` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: CWE-1284
- [jcvi vulnerable to Configuration Injection due to unsanitized user input](https://agentprime.io/advisories/GHSA-x49m-3cw7-gq5q.md)
  `GHSA-x49m-3cw7-gq5q`, `CVE-2023-35932`, `PYSEC-2026-1470` · PyPI `jcvi`: affected `<=1.3.5`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 23 Jun 2023 · Tags: Command injection, CWE-1284
- [The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers.](https://agentprime.io/advisories/CVE-2023-34188.md)
  `CVE-2023-34188` · CVE record · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-1284
- [A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application.](https://agentprime.io/advisories/CVE-2023-30082.md)
  `CVE-2023-30082` · CVE record · CVSS 7.5 High · Not analysed yet · Published 14 Jun 2023 · Tags: CWE-1284
- [PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash](https://agentprime.io/advisories/GHSA-h87r-f4vc-mchv.md)
  `GHSA-h87r-f4vc-mchv`, `CVE-2023-7332`, `PKSA-rjb4-mbc7-gvrq` · Packagist `pocketmine/pocketmine-mp`: affected `<4.18.1`, fixed in `4.18.1` · CVSS 7.1 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-1284
- [Mozilla Firefox: Due to URL previews in the network panel of developer tools improperly storing URLs…](https://agentprime.io/advisories/CVE-2023-25731.md)
  `CVE-2023-25731` · CVE record: Mozilla Firefox · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-1284
- [An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.](https://agentprime.io/advisories/CVE-2022-47029.md)
  `CVE-2022-47029` · CVE record · CVSS 7.8 High · Not analysed yet · Published 30 May 2023 · Tags: CWE-1284
- [Android: In several functions of PhoneAccountRegistrar.java…](https://agentprime.io/advisories/CVE-2023-21111.md)
  `CVE-2023-21111` · CVE record: Android · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In m4u, there is a possible out of bounds write due to improper input validation.](https://agentprime.io/advisories/CVE-2023-20722.md)
  `CVE-2023-20722` · CVE record: MediaTek, Inc. MT6765, MT6768, MT8768 · CVSS 6.7 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In keyinstall, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20710.md)
  `CVE-2023-20710` · CVE record: MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 · CVSS 4.4 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In keyinstall, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20709.md)
  `CVE-2023-20709` · CVE record: MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 · CVSS 4.4 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In keyinstall, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20708.md)
  `CVE-2023-20708` · CVE record: MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In ril, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20707.md)
  `CVE-2023-20707` · CVE record: MediaTek, Inc. MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In apu, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20705.md)
  `CVE-2023-20705` · CVE record: MediaTek, Inc. MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8195 · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [In apu, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-20704.md)
  `CVE-2023-20704` · CVE record: MediaTek, Inc. MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8195 · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [Multiple validation issues were addressed with improved input sanitization.](https://agentprime.io/advisories/CVE-2023-27961.md)
  `CVE-2023-27961` · CVE record: Apple macOS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 May 2023 · Tags: CWE-1284
- [A validation issue was addressed with improved input sanitization.](https://agentprime.io/advisories/CVE-2023-27941.md)
  `CVE-2023-27941` · CVE record: Apple macOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 8 May 2023 · Tags: CWE-1284
- [CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.](https://agentprime.io/advisories/CVE-2023-30269.md)
  `CVE-2023-30269` · CVE record · CVSS 8.1 High · Not analysed yet · Published 26 Apr 2023 · Tags: CWE-1284
- [NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportan…](https://agentprime.io/advisories/CVE-2023-0195.md)
  `CVE-2023-0195` · CVE record: NVIDIA vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) · CVSS 2.0 Low · Not analysed yet · Published 1 Apr 2023 · Tags: CWE-1284

Newest: <https://agentprime.io/advisories/tag/cwe-1284.md>
Older: <https://agentprime.io/advisories/tag/cwe-1284.md?cursor=WyIyMDIzLTA0LTAxVDA0OjU1OjA4Ljk1NjAwMFoiLCJDVkUtMjAyMy0wMTk1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1284&cursor=WyIyMDI1LTAyLTExVDIxOjI2OjExLjEyODAwMFoiLCJDVkUtMjAyMy0yMDU4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1284/?cursor=WyIyMDI1LTAyLTExVDIxOjI2OjExLjEyODAwMFoiLCJDVkUtMjAyMy0yMDU4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.
