# CWE-391.

Every Advisory and CVE whose sources give the weakness CWE-391, newest first.

## Records, newest first

- [HCL BigFix AEX is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-67080.md)
  `CVE-2026-67080` · CVE record: HCL Software BigFix AEX · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Information disclosure, CWE-391, CWE-755
- [Zammad: PGP signature spoofing via unvalidated verification return](https://agentprime.io/advisories/CVE-2026-56727.md)
  `CVE-2026-56727` · CVE record: zammad zammad · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-391
- [openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret fro...](https://agentprime.io/advisories/GHSA-p3gq-pcg9-qvfv.md)
  `GHSA-p3gq-pcg9-qvfv`, `CVE-2026-74900`, `PYSEC-2026-3772` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-391
- [Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass](https://agentprime.io/advisories/GHSA-5rph-q42j-36j9.md)
  `GHSA-5rph-q42j-36j9` · PyPI `picklescan`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-391
- [Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass](https://agentprime.io/advisories/GHSA-9gvj-pp9x-gcfr.md)
  `GHSA-9gvj-pp9x-gcfr`, `CVE-2025-71325`, `PYSEC-2026-1788` · PyPI `picklescan`: affected `<0.0.27`, fixed in `0.0.27` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2025 · Tags: Insecure deserialization, CWE-391
- [Apache Tomcat - Authentication Bypass](https://agentprime.io/advisories/GHSA-xcpr-7mr4-h4xq.md)
  `GHSA-xcpr-7mr4-h4xq`, `BIT-tomcat-2024-52316`, `CVE-2024-52316` · Maven `org.apache.tomcat:tomcat-catalina`: affected `<9.0.96 || >=10.1.0-M1, <10.1.30 || >=11.0.0-M1, <11.0.1`, fixed in `9.0.96`, `10.1.30`, `11.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-391, CWE-754
- [Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20849.md)
  `CVE-2022-20849` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.1 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-391
- [Envoy incorrectly accepts HTTP 200 response for entering upgrade mode](https://agentprime.io/advisories/CVE-2024-23326.md)
  `CVE-2024-23326` · CVE record: envoyproxy envoy · CVSS 5.9 Medium · Not analysed yet · Published 4 Jun 2024 · Tags: CWE-391
- [In DA, there is a possible permission bypass due to an incorrect status check.](https://agentprime.io/advisories/CVE-2023-32871.md)
  `CVE-2023-32871` · CVE record: MediaTek, Inc. MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6893, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798 · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2024 · Tags: CWE-391
- [Froxlor contains Unchecked Error Condition](https://agentprime.io/advisories/GHSA-3chw-8jq2-w769.md)
  `GHSA-3chw-8jq2-w769`, `CVE-2023-0572`, `PKSA-zmb6-7wzk-791q` · Packagist `froxlor/froxlor`: affected `<2.0.10`, fixed in `2.0.10` · CVSS 5.3 Medium · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-391, CWE-754
- [Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message](https://agentprime.io/advisories/CVE-2022-22160.md)
  `CVE-2022-22160` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-391
- [A flaw was found in samba's DNS server.](https://agentprime.io/advisories/CVE-2020-14383.md)
  `CVE-2020-14383` · CVE record: samba · No CVSS score · Not analysed yet · Published 2 Dec 2020 · Tags: CWE-391
- [Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA](https://agentprime.io/advisories/GHSA-2mrj-435v-c2cr.md)
  `GHSA-2mrj-435v-c2cr`, `CVE-2019-14853`, `GHSA-pwfw-mgfj-7g3g`, `PYSEC-2019-177` · PyPI `ecdsa`: affected `<0.13.3`, fixed in `0.13.3` · CVSS 3.7 Low · Withdrawn · Not analysed yet · Published 2 Dec 2019 · Tags: CWE-391
- [grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file](https://agentprime.io/advisories/GHSA-rrj3-qmh8-72pf.md)
  `GHSA-rrj3-qmh8-72pf`, `CVE-2016-10526` · npm `grunt-gh-pages`: affected `<0.10.0`, fixed in `0.10.0` · No CVSS score · Not analysed yet · Published 18 Feb 2019 · Tags: CWE-391
- [In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POW…](https://agentprime.io/advisories/CVE-2018-1091.md)
  `CVE-2018-1091` · CVE record: Linux kernel v4.13 and newer · No CVSS score · Not analysed yet · Published 27 Mar 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing…](https://agentprime.io/advisories/CVE-2017-12187.md)
  `CVE-2017-12187` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension…](https://agentprime.io/advisories/CVE-2017-12186.md)
  `CVE-2017-12186` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.](https://agentprime.io/advisories/CVE-2017-12185.md)
  `CVE-2017-12185` · CVE record · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension…](https://agentprime.io/advisories/CVE-2017-12184.md)
  `CVE-2017-12184` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing…](https://agentprime.io/advisories/CVE-2017-12183.md)
  `CVE-2017-12183` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension…](https://agentprime.io/advisories/CVE-2017-12182.md)
  `CVE-2017-12182` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension…](https://agentprime.io/advisories/CVE-2017-12181.md)
  `CVE-2017-12181` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension…](https://agentprime.io/advisories/CVE-2017-12180.md)
  `CVE-2017-12180` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in…](https://agentprime.io/advisories/CVE-2017-12179.md)
  `CVE-2017-12179` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy…](https://agentprime.io/advisories/CVE-2017-12178.md)
  `CVE-2017-12178` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo…](https://agentprime.io/advisories/CVE-2017-12177.md)
  `CVE-2017-12177` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [The X.Org Foundation xorg-x11-server: xorg-x11-server before 1.19.5 was missing extra length validation in…](https://agentprime.io/advisories/CVE-2017-12176.md)
  `CVE-2017-12176` · CVE record: The X.Org Foundation xorg-x11-server · No CVSS score · Not analysed yet · Published 24 Jan 2018 · Tags: CWE-391
- [Red Hat, Inc. fedora-arm-installer: fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege…](https://agentprime.io/advisories/CVE-2017-7496.md)
  `CVE-2017-7496` · CVE record: Red Hat, Inc. fedora-arm-installer · No CVSS score · Not analysed yet · Published 26 Jun 2017 · Tags: CWE-391

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-391>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-391/>. Everything for agents: <https://agentprime.io/llms.txt>.