# CWE-754.

Every Advisory and CVE whose sources give the weakness CWE-754, newest first.

## Records, newest first (an older page)

- [posix-clock: Fix missing timespec64 check in pc_clock_settime()](https://agentprime.io/advisories/CVE-2024-50195.md)
  `CVE-2024-50195` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754
- [virtio_pmem: Check device status before requesting flush](https://agentprime.io/advisories/CVE-2024-50184.md)
  `CVE-2024-50184` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754
- [vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.c.](https://agentprime.io/advisories/CVE-2024-35427.md)
  `CVE-2024-35427` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754
- [vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.c.](https://agentprime.io/advisories/CVE-2024-35424.md)
  `CVE-2024-35424` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754
- [vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser.c.](https://agentprime.io/advisories/CVE-2024-35421.md)
  `CVE-2024-35421` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754
- [loona-hpack Panic Vulnerability](https://agentprime.io/advisories/GHSA-7vm6-qwh5-9x44.md)
  `GHSA-7vm6-qwh5-9x44`, `CVE-2024-51502` · crates.io `loona-hpack`: affected `<0.4.3`, fixed in `0.4.3` · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-754, CWE-755
- [Improper check for unusual conditions in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2024-44235.md)
  `CVE-2024-44235` · CVE record: Apple iOS and iPadOS · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: CWE-754
- [An issue was discovered in libexpat before 2.6.4.](https://agentprime.io/advisories/CVE-2024-50602.md)
  `CVE-2024-50602` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2024 · Tags: CWE-754
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2024-45085.md)
  `CVE-2024-45085` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted](https://agentprime.io/advisories/CVE-2024-47507.md)
  `CVE-2024-47507` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754
- [Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash](https://agentprime.io/advisories/CVE-2024-47503.md)
  `CVE-2024-47503` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash](https://agentprime.io/advisories/CVE-2024-47499.md)
  `CVE-2024-47499` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754
- [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2024-9469.md)
  `CVE-2024-9469` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.7 Medium · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) TDX Module firmware](https://agentprime.io/advisories/CVE-2024-27457.md)
  `CVE-2024-27457` · CVE record: Intel(R) TDX Module firmware · CVSS 1.8 Low · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-754
- [Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability](https://agentprime.io/advisories/CVE-2024-9124.md)
  `CVE-2024-9124` · CVE record: Rockwell Automation Drives - PowerFlex 6000T · CVSS 8.2 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-754
- [Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump](https://agentprime.io/advisories/CVE-2024-7826.md)
  `CVE-2024-7826` · CVE record: Webroot SecureAnywhere - Web Shield · CVSS 6.2 Medium · Not analysed yet · Published 3 Oct 2024 · Tags: CWE-754
- [CODESYS: web server vulnerable to DoS](https://agentprime.io/advisories/CVE-2024-8175.md)
  `CVE-2024-8175` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-754
- [ClamAV Privilege Handling Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-20506.md)
  `CVE-2024-20506` · CVE record: Cisco ClamAV · CVSS 6.1 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-754
- [Improper check for unusual conditions in MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990…](https://agentprime.io/advisories/CVE-2024-20089.md)
  `CVE-2024-20089` · CVE record: MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990, MT8678, MT8775, MT8792, MT8796 · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-703, CWE-754
- [Failure to update the tamper reset cause register when a tamper event occurs](https://agentprime.io/advisories/CVE-2024-2502.md)
  `CVE-2024-2502` · CVE record: silabs.com SE Firmware · CVSS 2.0 Low · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-754
- [User creation date manipulation in POST /api/v4/users](https://agentprime.io/advisories/CVE-2024-42411.md)
  `CVE-2024-42411` · CVE record: Mattermost Mattermost · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: CWE-754
- [Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium](https://agentprime.io/advisories/GHSA-gjcg-vrxg-xmgv.md)
  `GHSA-gjcg-vrxg-xmgv`, `BIT-envoy-2021-39162`, `CVE-2021-39162`, `GO-2022-0933` · Go `github.com/pomerium/pomerium`: affected `<0.15.1`, fixed in `0.15.1` · CVSS 8.6 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-754
- [Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling](https://agentprime.io/advisories/CVE-2024-40619.md)
  `CVE-2024-40619` · CVE record: Rockwell Automation ControlLogix® 5580 and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) Ethernet Network Controllers and Adapters E810 Series](https://agentprime.io/advisories/CVE-2024-21806.md)
  `CVE-2024-21806` · CVE record: Intel(R) Ethernet Network Controllers and Adapters E810 Series · CVSS 6.8 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-754
- [Jenkins Remoting library arbitrary file read vulnerability](https://agentprime.io/advisories/GHSA-h856-ffvv-xvr4.md)
  `GHSA-h856-ffvv-xvr4`, `BIT-jenkins-2024-43044`, `CVE-2024-43044` · Maven `org.jenkins-ci.main:jenkins-core` and 1 more: affected `<2.452.4 || >=2.460, <2.462.1 || >=2.470, <2.471`, fixed in `2.452.4`, `2.462.1`, `2.471` · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.29 · Not analysed yet · Published 7 Aug 2024 · Tags: Path traversal, CWE-754
- [Mattermost allows a remote actor to permanently delete local data by abusing dangerous error handling in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-762m-4cx6-6mf4.md)
  `GHSA-762m-4cx6-6mf4`, `CVE-2024-39832`, `GO-2024-3020` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=9.5.0+incompatible, <9.5.7+incompatible || >=9.7.0+incompatible, <9.7.6+incompatible || >=9.8.0+incompatible, <9.8.2+incompatible || >=9.9.0+incompatible, <9.9.1+incompatible`, fixed in `9.5.7+incompatible`, `9.7.6+incompatible`, `9.8.2+incompatible`, `9.9.1+incompatible` · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-754
- [XMP Toolkit's \`XmpFile::close\` can trigger undefined behavior](https://agentprime.io/advisories/GHSA-66fw-43h8-f8p3.md)
  `GHSA-66fw-43h8-f8p3`, `RUSTSEC-2024-0360` · crates.io `xmp_toolkit`: affected `<1.9.0`, fixed in `1.9.0` · No CVSS score · Not analysed yet · Published 26 Jul 2024 · Tags: CWE-754
- [Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash](https://agentprime.io/advisories/CVE-2024-39545.md)
  `CVE-2024-39545` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash](https://agentprime.io/advisories/CVE-2024-39540.md)
  `CVE-2024-39540` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes](https://agentprime.io/advisories/CVE-2024-39535.md)
  `CVE-2024-39535` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash](https://agentprime.io/advisories/CVE-2024-39530.md)
  `CVE-2024-39530` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario](https://agentprime.io/advisories/CVE-2024-39519.md)
  `CVE-2024-39519` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Suricata defrag: IP ID reuse can lead to policy bypass](https://agentprime.io/advisories/CVE-2024-37151.md)
  `CVE-2024-37151` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured](https://agentprime.io/advisories/CVE-2024-39517.md)
  `CVE-2024-39517` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754
- [Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path](https://agentprime.io/advisories/CVE-2024-39561.md)
  `CVE-2024-39561` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754
- [Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled](https://agentprime.io/advisories/CVE-2024-39559.md)
  `CVE-2024-39559` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Siemens SINEMA Remote Connect Server](https://agentprime.io/advisories/CVE-2024-39869.md)
  `CVE-2024-39869` · CVE record: Siemens SINEMA Remote Connect Server · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-754
- [Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx](https://agentprime.io/advisories/GHSA-fqpg-rq76-99pq.md)
  `GHSA-fqpg-rq76-99pq`, `GO-2024-2567` · Go `github.com/jackc/pgx/v5`: affected `<5.5.2`, fixed in `5.5.2` · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-754
- [Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash](https://agentprime.io/advisories/CVE-2024-21586.md)
  `CVE-2024-21586` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-754
- [socket.io has an unhandled 'error' event](https://agentprime.io/advisories/GHSA-25hc-qcg6-38wj.md)
  `GHSA-25hc-qcg6-38wj`, `CVE-2024-38355` · npm `socket.io`: affected `<2.5.1 || >=3.0.0, <4.6.2`, fixed in `2.5.1`, `4.6.2` · CVSS 7.3 High · Not analysed yet · Published 19 Jun 2024 · Tags: CWE-20, CWE-754
- [LNbits improperly handles potential network and payment failures when using Eclair backend](https://agentprime.io/advisories/GHSA-3j4h-h3fp-vwww.md)
  `GHSA-3j4h-h3fp-vwww`, `CVE-2024-34694`, `PYSEC-2026-1580` · PyPI `lnbits`: affected `<0.12.6`, fixed in `0.12.6` · CVSS 8.1 High · Not analysed yet · Published 17 Jun 2024 · Tags: CWE-754
- [irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.](https://agentprime.io/advisories/CVE-2024-38461.md)
  `CVE-2024-38461` · CVE record · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-754
- [Uncontrolled Resource Consumption in GitLab](https://agentprime.io/advisories/CVE-2024-5469.md)
  `CVE-2024-5469` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-754
- [Mattermost crashes web clients via a malformed custom status in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-8f99-g2pj-x8w3.md)
  `GHSA-8f99-g2pj-x8w3`, `CVE-2024-4182`, `GO-2024-2795` · Go `github.com/mattermost/mattermost-server`: affected `>=8.1.0+incompatible, <8.1.12+incompatible || >=9.4.0+incompatible, <9.4.5+incompatible || >=9.5.0+incompatible, <9.5.3+incompatible || >=9.6.0-rc1+incompatible, <9.6.1+incompatible`, fixed in `8.1.12+incompatible`, `9.4.5+incompatible`, `9.5.3+incompatible`, `9.6.1+incompatible` · CVSS 4.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-754
- [Directus is soft-locked by providing a string value to random string util](https://agentprime.io/advisories/GHSA-632p-p495-25m5.md)
  `GHSA-632p-p495-25m5`, `CVE-2024-36128` · npm `directus`: affected `<10.11.2`, fixed in `10.11.2` · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Huawei CurieM-WFG9B](https://agentprime.io/advisories/CVE-2023-52710.md)
  `CVE-2023-52710` · CVE record: Huawei CurieM-WFG9B · CVSS 7.8 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) Power Gadget software for macOS](https://agentprime.io/advisories/CVE-2023-38420.md)
  `CVE-2023-38420` · CVE record: Intel(R) Power Gadget software for macOS · CVSS 3.8 Low · Not analysed yet · Published 16 May 2024 · Tags: CWE-703, CWE-754
- [Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX](https://agentprime.io/advisories/GHSA-jcqq-g64v-gcm7.md)
  `GHSA-jcqq-g64v-gcm7`, `CVE-2024-34360`, `GO-2024-2831` · Go `github.com/spacemeshos/api` and 1 more: affected `<1.37.1`, fixed in `1.37.1` · CVSS 8.2 High · Not analysed yet · Published 10 May 2024 · Tags: CWE-754
- [Suricata's defrag contains various issues leading to policy bypass](https://agentprime.io/advisories/CVE-2024-32867.md)
  `CVE-2024-32867` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2024 · Tags: CWE-754
- [PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF](https://agentprime.io/advisories/GHSA-wgrm-67xf-hhpq.md)
  `GHSA-wgrm-67xf-hhpq`, `CVE-2024-4367` · npm `pdfjs-dist`: affected `<4.2.67`, fixed in `4.2.67` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.71 · Not analysed yet · Published 7 May 2024 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription](https://agentprime.io/advisories/CVE-2024-30402.md)
  `CVE-2024-30402` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754
- [Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process](https://agentprime.io/advisories/CVE-2024-30397.md)
  `CVE-2024-30397` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754
- [Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur](https://agentprime.io/advisories/CVE-2024-30384.md)
  `CVE-2024-30384` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).](https://agentprime.io/advisories/CVE-2024-30409.md)
  `CVE-2024-30409` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000](https://agentprime.io/advisories/CVE-2023-52534.md)
  `CVE-2023-52534` · CVE record: Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000 · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-754
- [glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling \_\_glXGetDrawableAttribute().](https://agentprime.io/advisories/CVE-2023-45922.md)
  `CVE-2023-45922` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-754
- [Improper check for unusual conditions in MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789…](https://agentprime.io/advisories/CVE-2024-20037.md)
  `CVE-2024-20037` · CVE record: MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6983, MT6985, MT6989, MT8168, MT8188, MT8195, MT8673, MT8675 · CVSS 6.7 Medium · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-754
- [Improper check for unusual conditions in Mozilla Firefox](https://agentprime.io/advisories/CVE-2024-1556.md)
  `CVE-2024-1556` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-754
- [XSS sidekiq-unique-jobs UI server vulnerability](https://agentprime.io/advisories/GHSA-cmh9-rx85-xj38.md)
  `GHSA-cmh9-rx85-xj38`, `CVE-2023-46950`, `CVE-2023-46951`, `CVE-2024-25122`, `GHSA-fhx8-5c23-x7x5` · RubyGems `sidekiq-unique-jobs`: affected `>=6.0.0.rc7, <7.1.33 || >=8.0.0, <8.0.7`, fixed in `7.1.33`, `8.0.7` · CVSS 7.1 High · Not analysed yet · Published 13 Feb 2024 · Tags: Cross-site scripting (XSS), Denial of service, CWE-754
- [create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.](https://agentprime.io/advisories/CVE-2024-25739.md)
  `CVE-2024-25739` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 12 Feb 2024 · Tags: CWE-754

Newest: <https://agentprime.io/advisories/tag/cwe-754.md>
Older: <https://agentprime.io/advisories/tag/cwe-754.md?cursor=WyIyMDI0LTAyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNC0yNTczOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-754&cursor=WyIyMDI0LTExLTA4VDA1OjU0OjEwLjk0OTAwMFoiLCJDVkUtMjAyNC01MDE5NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-754/?cursor=WyIyMDI0LTExLTA4VDA1OjU0OjEwLjk0OTAwMFoiLCJDVkUtMjAyNC01MDE5NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.