# CWE-754. Every Advisory and CVE whose sources give the weakness CWE-754, newest first. ## Records, newest first (an older page) - [Denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2025-41241.md) `CVE-2025-41241` · CVE record: VMware vCenter and 3 more · CVSS 4.4 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-754 - [Polkadot Frontier contains missing \`check_inherent\` for \`note_min_gas_price_target\` inflates gas price](https://agentprime.io/advisories/CVE-2025-54427.md) `CVE-2025-54427` · CVE record: polkadot-evm frontier · CVSS 6.9 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-682, CWE-754 - [Solady lacks extcodesize validation on implementation in ERC4337Factory](https://agentprime.io/advisories/CVE-2025-53638.md) `CVE-2025-53638` · CVE record: Vectorized solady · CVSS 6.9 Medium · Not analysed yet · Published 17 Jul 2025 · Tags: CWE-754 - [Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash](https://agentprime.io/advisories/CVE-2025-52981.md) `CVE-2025-52981` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-754 - [Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability](https://agentprime.io/advisories/CVE-2025-4663.md) `CVE-2025-4663` · CVE record: Broadcom Brocade Fabric OS · CVSS 6.8 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-754 - [ethereum does not check transaction malleability for EIP-2930, EIP-1559 and EIP-7702 transactions](https://agentprime.io/advisories/GHSA-3w94-vq2x-v5wr.md) `GHSA-3w94-vq2x-v5wr`, `CVE-2025-53359` · crates.io `ethereum`: affected `<0.18.0`, fixed in `0.18.0` · CVSS 6.9 Medium · Not analysed yet · Published 2 Jul 2025 · Tags: CWE-754 - [Disabled Abortion Flag](https://agentprime.io/advisories/CVE-2023-28910.md) `CVE-2023-28910` · CVE record: Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB · CVSS 8.0 High · Not analysed yet · Published 28 Jun 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Hitachi Energy Relion 670/650 and SAM600-IO](https://agentprime.io/advisories/CVE-2025-1718.md) `CVE-2025-1718` · CVE record: Hitachi Energy Relion 670/650 and SAM600-IO · CVSS 7.1 High · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-754 - [PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets](https://agentprime.io/advisories/CVE-2025-0130.md) `CVE-2025-0130` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.2 High · Not analysed yet · Published 14 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) Arc™ GPU](https://agentprime.io/advisories/CVE-2024-28036.md) `CVE-2024-28036` · CVE record: Intel(R) Arc™ GPU · CVSS 5.7 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Edge Orchestrator software for Intel(R) Tiber™ Edge Platform](https://agentprime.io/advisories/CVE-2025-22848.md) `CVE-2025-22848` · CVE record: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 5.1 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Phoenix SecureCore Technology 4](https://agentprime.io/advisories/CVE-2024-12533.md) `CVE-2024-12533` · CVE record: Phoenix SecureCore Technology 4 · CVSS 3.3 Low · Not analysed yet · Published 13 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20201.md) `CVE-2025-20201` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20200.md) `CVE-2025-20200` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20198.md) `CVE-2025-20198` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.6 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass](https://agentprime.io/advisories/CVE-2024-10635.md) `CVE-2024-10635` · CVE record: Proofpoint Enterprise Protection · CVSS 6.1 Medium · Not analysed yet · Published 28 Apr 2025 · Tags: CWE-754 - [Improper check for unusual conditions in 7-Zip](https://agentprime.io/advisories/CVE-2022-47112.md) `CVE-2022-47112` · CVE record: 7-Zip 7-Zip · CVSS 2.5 Low · Not analysed yet · Published 19 Apr 2025 · Tags: CWE-754 - [Improper check for unusual conditions in 7-Zip](https://agentprime.io/advisories/CVE-2022-47111.md) `CVE-2022-47111` · CVE record: 7-Zip 7-Zip · CVSS 2.5 Low · Not analysed yet · Published 19 Apr 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Nullsoft Scriptable Install System](https://agentprime.io/advisories/CVE-2025-43715.md) `CVE-2025-43715` · CVE record: Nullsoft Nullsoft Scriptable Install System · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-754 - [http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed](https://agentprime.io/advisories/GHSA-9gqv-wp59-fq42.md) `GHSA-9gqv-wp59-fq42`, `CVE-2025-32997` · npm `http-proxy-middleware`: affected `>=1.3.0, <2.0.9 || >=3.0.0, <3.0.5`, fixed in `2.0.9`, `3.0.5` · CVSS 4.0 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-754 - [Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser](https://agentprime.io/advisories/CVE-2025-0129.md) `CVE-2025-0129` · CVE record: Palo Alto Networks Prisma Access Browser · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Apr 2025 · Tags: Authentication bypass, CWE-754 - [PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet](https://agentprime.io/advisories/CVE-2025-0128.md) `CVE-2025-0128` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.7 High · Not analysed yet · Published 11 Apr 2025 · Tags: CWE-754 - [Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset](https://agentprime.io/advisories/CVE-2025-30660.md) `CVE-2025-30660` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled](https://agentprime.io/advisories/CVE-2025-30655.md) `CVE-2025-30655` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed](https://agentprime.io/advisories/CVE-2025-21597.md) `CVE-2025-21597` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block](https://agentprime.io/advisories/CVE-2025-21594.md) `CVE-2025-21594` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Gnuplot: segmentation fault via io_str_init_static_internal function](https://agentprime.io/advisories/CVE-2025-3359.md) `CVE-2025-3359` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-754 - [Libsoup: segmentation fault when parsing malformed data uri](https://agentprime.io/advisories/CVE-2025-32051.md) `CVE-2025-32051` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-754 - [Improper check for unusual conditions in OpenVPN](https://agentprime.io/advisories/CVE-2025-2704.md) `CVE-2025-2704` · CVE record: OpenVPN OpenVPN · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-754 - [Improper check for unusual conditions in GnuPG](https://agentprime.io/advisories/CVE-2025-30258.md) `CVE-2025-30258` · CVE record: GnuPG GnuPG · CVSS 2.7 Low · Not analysed yet · Published 19 Mar 2025 · Tags: CWE-754 - [PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame](https://agentprime.io/advisories/CVE-2025-0116.md) `CVE-2025-0116` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-754 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-54175.md) `CVE-2024-54175` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-754 - [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2025-0112.md) `CVE-2025-0112` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.8 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: CWE-754 - [Leaked User IDs and Metadata of Deleted DMs](https://agentprime.io/advisories/CVE-2025-0503.md) `CVE-2025-0503` · CVE record: Mattermost Mattermost · CVSS 3.1 Low · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-754 - [IBM i denial of service](https://agentprime.io/advisories/CVE-2024-52895.md) `CVE-2024-52895` · CVE record: IBM i · CVSS 6.5 Medium · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-754 - [IBM Security Verify Directory denial of service](https://agentprime.io/advisories/CVE-2024-45650.md) `CVE-2024-45650` · CVE record: IBM Security Verify Directory · CVSS 7.5 High · Not analysed yet · Published 31 Jan 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2025-24161.md) `CVE-2025-24161` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-754 - [matrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support](https://agentprime.io/advisories/CVE-2025-23197.md) `CVE-2025-23197` · CVE record: matrix-org matrix-hookshot · CVSS 6.5 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-754 - [Unsafe Handling of IHV UEFI Variables](https://agentprime.io/advisories/CVE-2024-29980.md) `CVE-2024-29980` · CVE record: Phoenix SecureCore™ for Intel Kaby Lake and 3 more · CVSS 4.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-754 - [Unsafe Handling of Phoenix UEFI Variables](https://agentprime.io/advisories/CVE-2024-29979.md) `CVE-2024-29979` · CVE record: Phoenix SecureCore™ for Intel Kaby Lake and 3 more · CVSS 4.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-754 - [Mattermost has Improper Check for Unusual or Exceptional Conditions](https://agentprime.io/advisories/GHSA-7rgp-4j56-fm79.md) `GHSA-7rgp-4j56-fm79`, `CVE-2025-22445`, `GO-2025-3380` · Go `github.com/mattermost/mattermost/server/v8`: affected `<8.0.0-20250102081831-64c566a8280b || >=10.0, <10.3.0`, fixed in `8.0.0-20250102081831-64c566a8280b`, `10.3.0` · CVSS 3.5 Low · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-754 - [drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check](https://agentprime.io/advisories/CVE-2024-56778.md) `CVE-2024-56778` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-754 - [drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check](https://agentprime.io/advisories/CVE-2024-56777.md) `CVE-2024-56777` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-754 - [drm/sti: avoid potential dereference of error pointers](https://agentprime.io/advisories/CVE-2024-56776.md) `CVE-2024-56776` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-754 - [octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c](https://agentprime.io/advisories/CVE-2024-56728.md) `CVE-2024-56728` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 29 Dec 2024 · Tags: CWE-754 - [octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c](https://agentprime.io/advisories/CVE-2024-56725.md) `CVE-2024-56725` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 29 Dec 2024 · Tags: CWE-754 - [f2fs: fix to do sanity check on node blkaddr in truncate_node()](https://agentprime.io/advisories/CVE-2024-56692.md) `CVE-2024-56692` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-754 - [PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet](https://agentprime.io/advisories/CVE-2024-3393.md) `CVE-2024-3393` · CVE record: Palo Alto Networks Cloud NGFW and 1 more · CVSS 8.7 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.29 · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-754 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-51470.md) `CVE-2024-51470` · CVE record: IBM MQ and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-754 - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54116.md) `CVE-2024-54116` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54115.md) `CVE-2024-54115` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54114.md) `CVE-2024-54114` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Domain Restriction Bypass on Registration](https://agentprime.io/advisories/CVE-2024-11599.md) `CVE-2024-11599` · CVE record: Mattermost Mattermost · CVSS 8.2 High · Not analysed yet · Published 28 Nov 2024 · Tags: CWE-754 - [OpenStack Neutron can use an incorrect ID during policy enforcement](https://agentprime.io/advisories/GHSA-f27h-g923-68hw.md) `GHSA-f27h-g923-68hw`, `CVE-2024-53916`, `PYSEC-2026-1693` · PyPI `neutron`: affected `>=23.0.0, <23.2.1 || >=24.0.0, <24.0.2 || >=25.0.0, <25.0.1`, fixed in `23.2.1`, `24.0.2`, `25.0.1` · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2024 · Tags: CWE-345, CWE-754 - [While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at.](https://agentprime.io/advisories/CVE-2024-53432.md) `CVE-2024-53432` · CVE record · CVSS 7.5 High · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-754 - [ksmbd: Fix the missing xa_store error check](https://agentprime.io/advisories/CVE-2024-50284.md) `CVE-2024-50284` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-754 - [Apache Tomcat - Authentication Bypass](https://agentprime.io/advisories/GHSA-xcpr-7mr4-h4xq.md) `GHSA-xcpr-7mr4-h4xq`, `BIT-tomcat-2024-52316`, `CVE-2024-52316` · Maven `org.apache.tomcat:tomcat-catalina`: affected `<9.0.96 || >=10.1.0-M1, <10.1.30 || >=11.0.0-M1, <11.0.1`, fixed in `9.0.96`, `10.1.30`, `11.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-391, CWE-754 - [FactoryTalk® Updater Local Privilege Escalation](https://agentprime.io/advisories/CVE-2024-10945.md) `CVE-2024-10945` · CVE record: Rockwell Automation FactoryTalk Updater · CVSS 7.0 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-754 - [Moodle has insufficient capability checks](https://agentprime.io/advisories/GHSA-4gq2-x5w4-7hp8.md) `GHSA-4gq2-x5w4-7hp8`, `BIT-moodle-2024-43435`, `CVE-2024-43435`, `PKSA-52b5-bb1k-6tvt` · Packagist `moodle/moodle`: affected `<4.1.12 || >=4.2.0, <4.2.9 || >=4.3.0, <4.3.6 || >=4.4.0, <4.4.2`, fixed in `4.1.12`, `4.2.9`, `4.3.6`, `4.4.2` · CVSS 5.3 Medium · Not analysed yet · Published 11 Nov 2024 · Tags: CWE-754 - [pinctrl: ocelot: fix system hang on level based interrupts](https://agentprime.io/advisories/CVE-2024-50196.md) `CVE-2024-50196` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-754 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .