# CWE-230.

Every Advisory and CVE whose sources give the weakness CWE-230, newest first.

## Records, newest first

- [An empty \<img> attribute value in styled text triggers a parser error that halts the device.](https://agentprime.io/advisories/CVE-2026-19395.md)
  `CVE-2026-19395` · CVE record: qt Qt for MCUs · CVSS 6.6 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-230
- [Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability](https://agentprime.io/advisories/CVE-2026-25659.md)
  `CVE-2026-25659` · CVE record: Ericsson Packet Core Gateway (PCG) · CVSS 7.1 High · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-230
- [Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability](https://agentprime.io/advisories/CVE-2026-25658.md)
  `CVE-2026-25658` · CVE record: Ericsson Packet Core Gateway (PCG) · CVSS 7.1 High · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-230
- [A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an una…](https://agentprime.io/advisories/CVE-2026-20086.md)
  `CVE-2026-20086` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-230
- [Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values](https://agentprime.io/advisories/CVE-2026-1461.md)
  `CVE-2026-1461` · CVE record: wpinsider-1 Simple Membership · CVSS 6.5 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-230
- [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2025-23225.md)
  `CVE-2025-23225` · CVE record: IBM MQ · CVSS 6.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-230
- [AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset](https://agentprime.io/advisories/CVE-2024-11024.md)
  `CVE-2024-11024` · CVE record: scottopolis AppPresser – Mobile App Framework · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-230
- [RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery](https://agentprime.io/advisories/CVE-2024-10508.md)
  `CVE-2024-10508` · CVE record: metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Nov 2024 · Tags: CWE-230
- [Improper Handling of Missing Values in Wireshark](https://agentprime.io/advisories/CVE-2024-9781.md)
  `CVE-2024-9781` · CVE record: Wireshark Foundation Wireshark · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2024 · Tags: CWE-230
- [389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request](https://agentprime.io/advisories/CVE-2024-6237.md)
  `CVE-2024-6237` · CVE record: Red Hat Red Hat Directory Server 12.4 for RHEL 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-230
- [In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses.](https://agentprime.io/advisories/CVE-2024-0048.md)
  `CVE-2024-0048` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-230
- [Improper Handling of Missing Values in Wireshark](https://agentprime.io/advisories/CVE-2024-0208.md)
  `CVE-2024-0208` · CVE record: Wireshark Foundation Wireshark · CVSS 7.8 High · Not analysed yet · Published 3 Jan 2024 · Tags: CWE-230
- [Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received](https://agentprime.io/advisories/CVE-2023-1697.md)
  `CVE-2023-1697` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-230
- [Improper Handling of Missing Values in kaml](https://agentprime.io/advisories/GHSA-fmm9-3gv8-58f4.md)
  `GHSA-fmm9-3gv8-58f4`, `CVE-2021-39194` · Maven `com.charleskorn.kaml:kaml`: affected `<0.35.3`, fixed in `0.35.3` · CVSS 4.3 Medium · Not analysed yet · Published 7 Sept 2021 · Tags: Denial of service, CWE-230

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-230>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-230/>. Everything for agents: <https://agentprime.io/llms.txt>.