# CWE-684.

Every Advisory and CVE whose sources give the weakness CWE-684, newest first.

## Records, newest first

- [Google Chrome: Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2026-106390.md)
  `CVE-2026-106390` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-684
- [Google Chrome: Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior…](https://agentprime.io/advisories/CVE-2026-106361.md)
  `CVE-2026-106361` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-684
- [Google Chrome: Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows…](https://agentprime.io/advisories/CVE-2026-79126.md)
  `CVE-2026-79126` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-684
- [cut: -s ignored in -z -d '' newline-delimiter mode](https://agentprime.io/advisories/GHSA-pmfc-4wjj-gmhx.md)
  `GHSA-pmfc-4wjj-gmhx`, `CVE-2026-35381` · crates.io `uu_cut`: affected `<0.8.0`, fixed in `0.8.0` · CVSS 3.3 Low · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-684
- [zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser](https://agentprime.io/advisories/GHSA-gf9r-m956-97qx.md)
  `GHSA-gf9r-m956-97qx`, `CVE-2026-52735` · crates.io `zebrad` and 1 more: affected `<4.5.0`, fixed in `4.5.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-684
- [Tor: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE…](https://agentprime.io/advisories/CVE-2026-44597.md)
  `CVE-2026-44597` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-684
- [Exim: In Exim before 4.99.2, when JSON lookup is enabled…](https://agentprime.io/advisories/CVE-2026-40685.md)
  `CVE-2026-40685` · CVE record: Exim Exim · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-684
- [Exim: In Exim before 4.99.2, on systems using musl libc (not glibc)…](https://agentprime.io/advisories/CVE-2026-40684.md)
  `CVE-2026-40684` · CVE record: Exim Exim · CVSS 5.9 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-684
- [Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.](https://agentprime.io/advisories/CVE-2026-42255.md)
  `CVE-2026-42255` · CVE record: Technitium DnsServer · CVSS 7.2 High · Not analysed yet · Published 26 Apr 2026 · Tags: CWE-684
- [uutils coreutils has an Incorrect Provision of Specified Functionality Issue](https://agentprime.io/advisories/GHSA-fhr3-xh3q-69w6.md)
  `GHSA-fhr3-xh3q-69w6`, `CVE-2026-35379` · crates.io `coreutils`: affected `<0.8.0`, fixed in `0.8.0` · CVSS 3.3 Low · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-684
- [Duplicate Advisory: uutils coreutils has an Incorrect Provision of Specified Functionality Issue in its cut Utility](https://agentprime.io/advisories/GHSA-532v-xp3f-837c.md)
  `GHSA-532v-xp3f-837c` · crates.io `coreutils`: affected `<0.8.0`, fixed in `0.8.0` · CVSS 3.3 Low · Withdrawn · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-684
- [Apache Log4j Core: log injection in \`Rfc5424Layout\` due to silent configuration incompatibility](https://agentprime.io/advisories/GHSA-445c-vh5m-36rj.md)
  `GHSA-445c-vh5m-36rj`, `CVE-2026-34478` · Maven `org.apache.logging.log4j:log4j-core`: affected `>=2.21.0, <2.25.4 || >=3.0.0-beta1, <=3.0.0-beta3`, fixed in `2.25.4` · CVSS 6.9 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Other injection, CWE-684
- [RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation](https://agentprime.io/advisories/CVE-2026-30791.md)
  `CVE-2026-30791` · CVE record: rustdesk-client RustDesk Client · CVSS 8.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-684
- [RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption](https://agentprime.io/advisories/CVE-2026-3598.md)
  `CVE-2026-3598` · CVE record: rustdesk-server-pro RustDesk Server Pro · CVSS 8.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-684
- [MISP: app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking…](https://agentprime.io/advisories/CVE-2025-66384.md)
  `CVE-2025-66384` · CVE record: MISP MISP · CVSS 8.2 High · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-684
- [KDE Skanpage: In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents…](https://agentprime.io/advisories/CVE-2025-55174.md)
  `CVE-2025-55174` · CVE record: KDE Skanpage · CVSS 3.2 Low · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-684
- [Fortinet FortiOS: An Incorrect Provision of Specified Functionality vulnerability \[CWE-684\] in FortiOS…](https://agentprime.io/advisories/CVE-2025-58325.md)
  `CVE-2025-58325` · CVE record: Fortinet FortiOS · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-684
- [Akamai Rate Control: Akamai Rate Control alpha before 2025 allows attackers to send requests above the…](https://agentprime.io/advisories/CVE-2025-54568.md)
  `CVE-2025-54568` · CVE record: Akamai Rate Control · CVSS 3.7 Low · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-684
- [QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask…](https://agentprime.io/advisories/CVE-2025-54567.md)
  `CVE-2025-54567` · CVE record: QEMU QEMU · CVSS 4.2 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-684
- [ScriptCase: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23)…](https://agentprime.io/advisories/CVE-2025-47227.md)
  `CVE-2025-47227` · CVE record: ScriptCase ScriptCase · CVSS 7.5 High · Not analysed yet · Published 5 Jul 2025 · Tags: CWE-684
- [FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration.](https://agentprime.io/advisories/CVE-2024-50357.md)
  `CVE-2024-50357` · CVE record: Century Systems Co., Ltd. FutureNet NXR-G110 series and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Nov 2024 · Tags: CWE-684
- [Incorrect Provision of Specified Functionality in GitLab](https://agentprime.io/advisories/CVE-2024-5005.md)
  `CVE-2024-5005` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-684
- [Incorrect Provision of Specified Functionality in GitLab](https://agentprime.io/advisories/CVE-2024-8974.md)
  `CVE-2024-8974` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-684
- [Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20317.md)
  `CVE-2024-20317` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-684
- [Incorrect Provision of Specified Functionality in GitLab](https://agentprime.io/advisories/CVE-2024-6502.md)
  `CVE-2024-6502` · CVE record: GitLab GitLab · CVSS 5.7 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: CWE-684
- [Incorrect Provision of Specified Functionality vulnerability in MESbook](https://agentprime.io/advisories/CVE-2024-6425.md)
  `CVE-2024-6425` · CVE record: MESbook MESbook · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-684
- [Incorrect cipher key & IV length processing](https://agentprime.io/advisories/CVE-2023-5363.md)
  `CVE-2023-5363` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 24 Oct 2023 · Tags: CWE-684
- [bt: mesh: vulnerability in provisioning protocol implementation on provisionee side](https://agentprime.io/advisories/CVE-2023-4258.md)
  `CVE-2023-4258` · CVE record: zephyrproject-rtos Zephyr · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-684
- [Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c](https://agentprime.io/advisories/CVE-2023-5158.md)
  `CVE-2023-5158` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-684
- [Siemens RUGGEDCOM i800: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801…](https://agentprime.io/advisories/CVE-2023-24845.md)
  `CVE-2023-24845` · CVE record: Siemens RUGGEDCOM i800 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-684
- [Attacker can reset the device with AT Command in the process of rebooting the device.](https://agentprime.io/advisories/CVE-2022-23728.md)
  `CVE-2022-23728` · CVE record: LG mobile devices · No CVSS score · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-684
- [Incorrect Provision of Specified Functionality in qutebrowser](https://agentprime.io/advisories/GHSA-4rcq-jv2f-898j.md)
  `GHSA-4rcq-jv2f-898j`, `CVE-2020-11054`, `PYSEC-2020-97` · PyPI `qutebrowser`: affected `<1.11.1`, fixed in `1.11.1` · CVSS 3.5 Low · Not analysed yet · Published 8 May 2020 · Tags: CWE-684

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-684>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-684/>. Everything for agents: <https://agentprime.io/llms.txt>.