# CWE-690. Every Advisory and CVE whose sources give the weakness CWE-690, newest first. ## Records, newest first - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-76418.md) `CVE-2026-76418` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-690 - [Tanium addressed a denial of service vulnerability in Provision.](https://agentprime.io/advisories/CVE-2026-87086.md) `CVE-2026-87086` · CVE record: Tanium Provision · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-690 - [Null Pointer Dereference in Mailbox Error Handling](https://agentprime.io/advisories/CVE-2026-82946.md) `CVE-2026-82946` · CVE record: RT-Labs AB SOEM · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption, CWE-690 - [NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference.](https://agentprime.io/advisories/CVE-2026-24160.md) `CVE-2026-24160` · CVE record: NVIDIA TensorRT-LLM · CVSS 5.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-690 - [libsixel: NULL pointer dereference](https://agentprime.io/advisories/CVE-2026-44638.md) `CVE-2026-44638` · CVE record: saitoha libsixel · CVSS 2.5 Low · Not analysed yet · Published 14 May 2026 · Tags: Memory corruption, CWE-690 - [iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()](https://agentprime.io/advisories/CVE-2026-24411.md) `CVE-2026-24411` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.1 High · Not analysed yet · Published 24 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-690, CWE-758 - [iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()](https://agentprime.io/advisories/CVE-2026-24410.md) `CVE-2026-24410` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.1 High · Not analysed yet · Published 24 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-690, CWE-758 - [iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()](https://agentprime.io/advisories/CVE-2026-24409.md) `CVE-2026-24409` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.1 High · Not analysed yet · Published 24 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-690, CWE-758 - [iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()](https://agentprime.io/advisories/CVE-2026-24404.md) `CVE-2026-24404` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.1 High · Not analysed yet · Published 24 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-690, CWE-758 - [iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp](https://agentprime.io/advisories/CVE-2026-21689.md) `CVE-2026-21689` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-232, CWE-690 - [NULL Pointer Dereference in iccDEV XML Tag Parser](https://agentprime.io/advisories/CVE-2026-21502.md) `CVE-2026-21502` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690 - [NULL Pointer Dereference in iccDEV XML Parser](https://agentprime.io/advisories/CVE-2026-21499.md) `CVE-2026-21499` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-690 - [NULL Pointer Dereference in iccDEV XML Calculator Parser](https://agentprime.io/advisories/CVE-2026-21498.md) `CVE-2026-21498` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690 - [NULL Pointer Dereference in iccDEV Signature Parser](https://agentprime.io/advisories/CVE-2026-21496.md) `CVE-2026-21496` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690 - [NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…](https://agentprime.io/advisories/CVE-2025-33192.md) `CVE-2025-33192` · CVE record: NVIDIA DGX Spark · CVSS 5.7 Medium · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-690 - [JS - Crash on unexpected HTTP server response](https://agentprime.io/advisories/CVE-2024-42329.md) `CVE-2024-42329` · CVE record: Zabbix Zabbix · CVSS 3.3 Low · Not analysed yet · Published 27 Nov 2024 · Tags: Memory corruption, CWE-690 - [JS - Crash on empty HTTP server response](https://agentprime.io/advisories/CVE-2024-42328.md) `CVE-2024-42328` · CVE record: Zabbix Zabbix · CVSS 3.3 Low · Not analysed yet · Published 27 Nov 2024 · Tags: Memory corruption, CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31196.md) `CVE-2024-31196` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31185.md) `CVE-2024-31185` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31182.md) `CVE-2024-31182` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31175.md) `CVE-2024-31175` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31167.md) `CVE-2024-31167` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31165.md) `CVE-2024-31165` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-31164.md) `CVE-2024-31164` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-23916.md) `CVE-2024-23916` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [NULL Pointer Dereference in libfluid_msg library](https://agentprime.io/advisories/CVE-2024-23915.md) `CVE-2024-23915` · CVE record: Open Networking Foundation (ONF) libfluid · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-690 - [Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double\[\], int, int\[\]).](https://agentprime.io/advisories/CVE-2024-23085.md) `CVE-2024-23085` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-690 - [MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability](https://agentprime.io/advisories/CVE-2020-36646.md) `CVE-2020-36646` · CVE record: MediaArea ZenLib · CVSS 3.5 Low · Not analysed yet · Published 7 Jan 2023 · Tags: CWE-690 - [muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference](https://agentprime.io/advisories/GHSA-2r7v-cmch-5x26.md) `GHSA-2r7v-cmch-5x26`, `CVE-2022-41957` · npm `hummus` and 1 more: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2022 · Tags: CWE-690 - [Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp](https://agentprime.io/advisories/GHSA-rcrx-fpjp-mfrw.md) `GHSA-rcrx-fpjp-mfrw`, `CVE-2022-39381` · npm `hummus` and 1 more: affected `<1.0.111`, fixed in `1.0.111` · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2022 · Tags: Memory corruption, CWE-690 - [muhammara and hummus vulnerable to null pointer dereference on bad response object](https://agentprime.io/advisories/GHSA-frp9-2v6r-gj97.md) `GHSA-frp9-2v6r-gj97`, `CVE-2022-25885` · npm `hummus` and 1 more: affected `>=1.0.0, <1.0.111`, fixed in `1.0.111` · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-20, CWE-690 - [muhammara and hummus vulnerable to denial of service by NULL pointer dereference](https://agentprime.io/advisories/GHSA-9cv5-4wqv-9w94.md) `GHSA-9cv5-4wqv-9w94`, `CVE-2022-25892` · npm `hummus` and 1 more: affected `<1.0.111`, fixed in `1.0.111` · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-690 - [Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash](https://agentprime.io/advisories/CVE-2022-22233.md) `CVE-2022-22233` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-690 - [SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash](https://agentprime.io/advisories/CVE-2022-22231.md) `CVE-2022-22231` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-690 - [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20682.md) `CVE-2022-20682` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-690 - [Remote Code Execution in SCIMono](https://agentprime.io/advisories/GHSA-29q4-gxjq-rx5c.md) `GHSA-29q4-gxjq-rx5c`, `CVE-2021-21479` · Maven `com.sap.scimono:scimono-server`: affected `<0.0.19`, fixed in `0.0.19` · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 10 Feb 2021 · Tags: Path traversal, Other injection, Command injection, Code injection - [Micrium: A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium…](https://agentprime.io/advisories/CVE-2020-13582.md) `CVE-2020-13582` · CVE record: Micrium · CVSS 8.6 High · Not analysed yet · Published 26 Jan 2021 · Tags: CWE-690 - [Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet](https://agentprime.io/advisories/CVE-2020-1648.md) `CVE-2020-1648` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-159, CWE-690 - [GStreamer: An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of…](https://agentprime.io/advisories/CVE-2020-6095.md) `CVE-2020-6095` · CVE record: GStreamer · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2020 · Tags: CWE-690 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .