# CWE-754.

Every Advisory and CVE whose sources give the weakness CWE-754, newest first.

## Records, newest first (an older page)

- [moby docker daemon crash during image pull of malicious image](https://agentprime.io/advisories/GHSA-6fj5-m822-rqx8.md)
  `GHSA-6fj5-m822-rqx8`, `CVE-2021-21285` · Go `github.com/moby/moby`: affected `<19.3.15 || >=20.10.0-beta1, <20.10.3`, fixed in `19.3.15`, `20.10.3` · CVSS 6.5 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Denial of service, CWE-754
- [BuildKit vulnerable to possible panic when incorrect parameters sent from frontend](https://agentprime.io/advisories/GHSA-9p26-698r-w4hx.md)
  `GHSA-9p26-698r-w4hx`, `CVE-2024-23650`, `GO-2024-2492` · Go `github.com/moby/buildkit`: affected `<0.12.5`, fixed in `0.12.5` · CVSS 5.3 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: CWE-754
- [Vyper's raw_call \`value=\` kwargs not disabled for static and delegate calls](https://agentprime.io/advisories/GHSA-x2c2-q32w-4w6m.md)
  `GHSA-x2c2-q32w-4w6m`, `CVE-2024-24567`, `PYSEC-2024-151` · PyPI `vyper`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 4.8 Medium · Not analysed yet · Published 30 Jan 2024 · Tags: CWE-754
- [Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines](https://agentprime.io/advisories/CVE-2024-0675.md)
  `CVE-2024-0675` · CVE record: Lamassu Bitcoin ATM Douro machines · CVSS 6.3 Medium · Not analysed yet · Published 30 Jan 2024 · Tags: CWE-754
- [Unauthenticated Denial of Service (DOS) attack in AnythingLLM](https://agentprime.io/advisories/CVE-2024-22422.md)
  `CVE-2024-22422` · CVE record: Mintplex-Labs anything-llm · CVSS 7.5 High · Not analysed yet · Published 19 Jan 2024 · Tags: CWE-754
- [Improper Check or Handling of Exceptional Conditions in Aveva PI Server](https://agentprime.io/advisories/CVE-2023-34348.md)
  `CVE-2023-34348` · CVE record: Aveva PI Server · CVSS 7.5 High · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-703, CWE-754
- [Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash](https://agentprime.io/advisories/CVE-2024-21614.md)
  `CVE-2024-21614` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-754
- [Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash](https://agentprime.io/advisories/CVE-2024-21603.md)
  `CVE-2024-21603` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-754
- [msgpackr's conversion of property names to strings can trigger infinite recursion](https://agentprime.io/advisories/GHSA-7hpj-7hhx-2fgx.md)
  `GHSA-7hpj-7hhx-2fgx`, `CVE-2023-52079` · npm `msgpackr`: affected `<1.10.1`, fixed in `1.10.1` · CVSS 6.8 Medium · Not analysed yet · Published 28 Dec 2023 · Tags: Denial of service, CWE-754
- [Possible buffer overread from reading DNS responses](https://agentprime.io/advisories/CVE-2023-32726.md)
  `CVE-2023-32726` · CVE record: Zabbix Zabbix · CVSS 3.9 Low · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Siemens SINEC INS](https://agentprime.io/advisories/CVE-2023-48431.md)
  `CVE-2023-48431` · CVE record: Siemens SINEC INS · CVSS 6.8 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-754
- [Playbook plugin crash via missing interface type assertion](https://agentprime.io/advisories/CVE-2023-49607.md)
  `CVE-2023-49607` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44099.md)
  `CVE-2023-44099` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 · Tags: CWE-754
- [Azure RTOS USBX Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-48698.md)
  `CVE-2023-48698` · CVE record: azure-rtos usbx · CVSS 6.8 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption, CWE-754
- [Azure RTOS USBX Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-48696.md)
  `CVE-2023-48696` · CVE record: azure-rtos usbx · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption, CWE-754
- [Improper check for unusual conditions in Zoom Video Communications, Inc. Zoom Clients](https://agentprime.io/advisories/CVE-2023-39205.md)
  `CVE-2023-39205` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-46765.md)
  `CVE-2023-46765` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-754
- [Mattermost denial of service vulnerability](https://agentprime.io/advisories/GHSA-xvq6-h898-wcj8.md)
  `GHSA-xvq6-h898-wcj8`, `CVE-2023-5967` · Go `github.com/mattermost/mattermost-server/v6` and 1 more: affected `<7.8.12`, fixed in `7.8.12` · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-754
- [Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions](https://agentprime.io/advisories/GHSA-r344-xw3p-2frj.md)
  `GHSA-r344-xw3p-2frj`, `CVE-2023-45812` · crates.io `apollo-router`: affected `>=1.31.0, <1.33.0`, fixed in `1.33.0` · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-703, CWE-754
- [Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot](https://agentprime.io/advisories/CVE-2023-44199.md)
  `CVE-2023-44199` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754
- [Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets](https://agentprime.io/advisories/CVE-2023-44198.md)
  `CVE-2023-44198` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754
- [Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE](https://agentprime.io/advisories/CVE-2023-44196.md)
  `CVE-2023-44196` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41304.md)
  `CVE-2023-41304` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Apple macOS](https://agentprime.io/advisories/CVE-2023-41993.md)
  `CVE-2023-41993` · CVE record: Apple macOS · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.24 · Not analysed yet · Published 21 Sept 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Apple macOS and others](https://agentprime.io/advisories/CVE-2023-41992.md)
  `CVE-2023-41992` · CVE record: Apple macOS and 1 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.12 · Not analysed yet · Published 21 Sept 2023 · Tags: CWE-754
- [ITM Server Communications Hijack](https://agentprime.io/advisories/CVE-2023-4828.md)
  `CVE-2023-4828` · CVE record: Proofpoint ITM Server · CVSS 6.4 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-754
- [Browsing Context potentially not cleared when closing Private Window](https://agentprime.io/advisories/CVE-2023-4583.md)
  `CVE-2023-4583` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2023 · Tags: CWE-754
- [Electron context isolation bypass via nested unserializable return value](https://agentprime.io/advisories/GHSA-p7v2-p9m8-qqg7.md)
  `GHSA-p7v2-p9m8-qqg7`, `CVE-2023-29198` · npm `electron`: affected `<22.3.6 || >=23.0.0-alpha.1, <23.2.3 || >=24.0.0-alpha.1, <24.0.1 || >=25.0.0-alpha.1, <25.0.0-alpha.2`, fixed in `22.3.6`, `23.2.3`, `24.0.1`, `25.0.0-alpha.2` · CVSS 6.0 Medium · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-754
- [Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication](https://agentprime.io/advisories/CVE-2023-21405.md)
  `CVE-2023-21405` · CVE record: Axis Communications AB AXIS A1001 Network Door Controller and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: CWE-754, CWE-1286
- [Feathers socket handler allows abusing implicit toString](https://agentprime.io/advisories/GHSA-hhr9-rh25-hvf9.md)
  `GHSA-hhr9-rh25-hvf9`, `CVE-2023-37899` · npm `@feathersjs/socketio` and 1 more: affected `<4.5.18 || >=5.0.0, <5.0.8`, fixed in `4.5.18`, `5.0.8` · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2023 · Tags: CWE-754
- [Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel](https://agentprime.io/advisories/CVE-2023-36835.md)
  `CVE-2023-36835` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-754
- [Improper check for unusual conditions in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2023-38069.md)
  `CVE-2023-38069` · CVE record: JetBrains IntelliJ IDEA · CVSS 3.3 Low · Not analysed yet · Published 12 Jul 2023 · Tags: CWE-754
- [An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3.](https://agentprime.io/advisories/CVE-2023-37303.md)
  `CVE-2023-37303` · CVE record · No CVSS score · Not analysed yet · Published 30 Jun 2023 · Tags: CWE-754
- [Shopware improper mail validation vulnerability](https://agentprime.io/advisories/GHSA-gh66-fp7j-98v5.md)
  `GHSA-gh66-fp7j-98v5`, `CVE-2023-34099`, `PKSA-d7p2-r2dc-fk8q` · Packagist `shopware/shopware`: affected `>=5.1.4, <5.7.18`, fixed in `5.7.18` · CVSS 5.3 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: CWE-754
- [ink! vulnerable to incorrect decoding of storage value when using \`DelegateCall\`](https://agentprime.io/advisories/GHSA-853p-5678-hv8f.md)
  `GHSA-853p-5678-hv8f`, `CVE-2023-34449` · crates.io `ink` and 1 more: affected `>=4.0.0, <4.2.1`, fixed in `4.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 14 Jun 2023 · Tags: CWE-253, CWE-754
- [Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers](https://agentprime.io/advisories/CVE-2023-23602.md)
  `CVE-2023-23602` · CVE record: Mozilla Firefox and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-754
- [Denial of Service via the 'dump' SPL command](https://agentprime.io/advisories/CVE-2023-32716.md)
  `CVE-2023-32716` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2023 · Tags: CWE-754
- [Insufficient validation when decoding a Socket.IO packet](https://agentprime.io/advisories/GHSA-cqmj-92xf-r6r9.md)
  `GHSA-cqmj-92xf-r6r9`, `CVE-2023-32695` · npm `socket.io-parser`: affected `<3.3.4 || >=3.4.0, <3.4.3 || >=4.0.4, <4.2.3`, fixed in `3.3.4`, `3.4.3`, `4.2.3` · CVSS 7.3 High · Not analysed yet · Published 23 May 2023 · Tags: CWE-20, CWE-754
- [Improper check for unusual conditions in Android](https://agentprime.io/advisories/CVE-2023-21102.md)
  `CVE-2023-21102` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34\*) and others](https://agentprime.io/advisories/CVE-2023-25620.md)
  `CVE-2023-25620` · CVE record: Schneider Electric Modicon M340 CPU (part numbers BMXP34\*) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34\*) and others](https://agentprime.io/advisories/CVE-2023-25619.md)
  `CVE-2023-25619` · CVE record: Schneider Electric Modicon M340 CPU (part numbers BMXP34\*) and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-754
- [Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails](https://agentprime.io/advisories/CVE-2023-28979.md)
  `CVE-2023-28979` · CVE record: Juniper Networks Junos OS · CVSS 4.7 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754
- [Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash](https://agentprime.io/advisories/CVE-2023-28976.md)
  `CVE-2023-28976` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754
- [Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash](https://agentprime.io/advisories/CVE-2023-28974.md)
  `CVE-2023-28974` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754
- [libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c.](https://agentprime.io/advisories/CVE-2023-27772.md)
  `CVE-2023-27772` · CVE record · CVSS 7.5 High · Not analysed yet · Published 13 Apr 2023 · Tags: CWE-754
- [An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.](https://agentprime.io/advisories/CVE-2023-30456.md)
  `CVE-2023-30456` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 10 Apr 2023 · Tags: CWE-754
- [Improper Check for Unusual or Exceptional Conditions](https://agentprime.io/advisories/CVE-2022-3192.md)
  `CVE-2022-3192` · CVE record: ABB AC500 V2 · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2023 · Tags: CWE-754
- [IPFS go-bitfield vulnerable to DoS via malformed size arguments](https://agentprime.io/advisories/GHSA-2h6c-j3gf-xp9r.md)
  `GHSA-2h6c-j3gf-xp9r`, `CVE-2023-23626`, `GO-2023-1558` · Go `github.com/ipfs/go-bitfield`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-754, CWE-1284
- [Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf](https://agentprime.io/advisories/GHSA-w7pp-m8wf-vj6r.md)
  `GHSA-w7pp-m8wf-vj6r`, `CVE-2023-23931`, `PYSEC-2023-11` · PyPI `cryptography`: affected `>=1.8, <39.0.1`, fixed in `39.0.1` · CVSS 4.8 Medium · Not analysed yet · Published 7 Feb 2023 · Tags: CWE-754
- [Improper check for unusual conditions in Zyxel NWA110AX firmware](https://agentprime.io/advisories/CVE-2022-45854.md)
  `CVE-2022-45854` · CVE record: Zyxel NWA110AX firmware · CVSS 4.3 Medium · Not analysed yet · Published 7 Feb 2023 · Tags: CWE-754
- [Froxlor contains Unchecked Error Condition](https://agentprime.io/advisories/GHSA-3chw-8jq2-w769.md)
  `GHSA-3chw-8jq2-w769`, `CVE-2023-0572`, `PKSA-zmb6-7wzk-791q` · Packagist `froxlor/froxlor`: affected `<2.0.10`, fixed in `2.0.10` · CVSS 5.3 Medium · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-391, CWE-754
- [Improper check for unusual conditions in Schneider Electric EcoStruxure Control Expert and others](https://agentprime.io/advisories/CVE-2022-45788.md)
  `CVE-2022-45788` · CVE record: Schneider Electric EcoStruxure Control Expert and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop](https://agentprime.io/advisories/CVE-2023-22393.md)
  `CVE-2023-22393` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-358, CWE-754
- [Improper check for unusual conditions in Zyxel GS1920-24v2 firmware](https://agentprime.io/advisories/CVE-2022-43393.md)
  `CVE-2022-43393` · CVE record: Zyxel GS1920-24v2 firmware · CVSS 8.2 High · Not analysed yet · Published 11 Jan 2023 · Tags: CWE-754
- [An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.](https://agentprime.io/advisories/CVE-2021-44856.md)
  `CVE-2021-44856` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-754
- [Apache Traffic Server: Improperly reading the client requests](https://agentprime.io/advisories/CVE-2022-37392.md)
  `CVE-2022-37392` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 5.3 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-754
- [Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins](https://agentprime.io/advisories/CVE-2022-32749.md)
  `CVE-2022-32749` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 7.5 High · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-754
- [Improper check for unusual conditions in Android](https://agentprime.io/advisories/CVE-2022-20588.md)
  `CVE-2022-20588` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-754
- [Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS me…](https://agentprime.io/advisories/CVE-2022-29278.md)
  `CVE-2022-29278` · CVE record · CVSS 8.2 High · Not analysed yet · Published 15 Nov 2022 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) XMM(TM) 7560 Modem software](https://agentprime.io/advisories/CVE-2022-26079.md)
  `CVE-2022-26079` · CVE record: Intel(R) XMM(TM) 7560 Modem software · CVSS 6.0 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-754

Newest: <https://agentprime.io/advisories/tag/cwe-754.md>
Older: <https://agentprime.io/advisories/tag/cwe-754.md?cursor=WyIyMDIyLTExLTExVDE1OjQ4OjQ3Ljc4NTAwMFoiLCJDVkUtMjAyMi0yNjA3OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-754&cursor=WyIyMDI0LTAyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNC0yNTczOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-754/?cursor=WyIyMDI0LTAyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNC0yNTczOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.