# CWE-754. Every Advisory and CVE whose sources give the weakness CWE-754, newest first. ## Records, newest first (an older page) - [Improper check for unusual conditions in Intel(R) NPU Drivers](https://agentprime.io/advisories/CVE-2025-32735.md) `CVE-2025-32735` · CVE record: Intel(R) NPU Drivers · CVSS 6.8 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) Optane(TM) PMem management software](https://agentprime.io/advisories/CVE-2025-20070.md) `CVE-2025-20070` · CVE record: Intel(R) Optane(TM) PMem management software · CVSS 5.4 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-754 - [Axios is Vulnerable to Denial of Service via \_\_proto\_\_ Key in mergeConfig](https://agentprime.io/advisories/GHSA-43fc-jf86-j433.md) `GHSA-43fc-jf86-j433`, `CVE-2026-25639` · npm `axios`: affected `<0.30.3 || >=1.0.0, <1.13.5`, fixed in `0.30.3`, `1.13.5` · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2026 · Tags: Prototype pollution, CWE-754, CWE-1287 - [Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001](https://agentprime.io/advisories/CVE-2026-0944.md) `CVE-2026-0944` · CVE record: Drupal Group invite · CVSS 5.3 Medium · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-754 - [openmls has improper tag validation](https://agentprime.io/advisories/GHSA-8x3w-qj7j-gqhf.md) `GHSA-8x3w-qj7j-gqhf` · crates.io `openmls`: affected `<0.7.2`, fixed in `0.7.2` · CVSS 4.0, no score published · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-754 - [ingress-nginx has Improper Check for Unusual or Exceptional Conditions](https://agentprime.io/advisories/GHSA-4g2f-xcph-2335.md) `GHSA-4g2f-xcph-2335`, `CVE-2026-24513`, `GO-2026-4419` · Go `k8s.io/ingress-nginx`: affected `<1.13.7 || >=1.14.0, <1.14.3`, fixed in `1.13.7`, `1.14.3` · CVSS 3.1 Low · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-754 - [Improper check for unusual conditions in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20419.md) `CVE-2026-20419` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.5 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-754 - [Denial of Service (DoS) of VoIP Communication on TP-Link VX800v](https://agentprime.io/advisories/CVE-2025-15542.md) `CVE-2025-15542` · CVE record: TP-Link Systems Inc. VX800v v1.0 · CVSS 6.3 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-754 - [Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers](https://agentprime.io/advisories/CVE-2026-24054.md) `CVE-2026-24054` · CVE record: kata-containers kata-containers · CVSS 8.8 High · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-754 - [HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126](https://agentprime.io/advisories/CVE-2025-14840.md) `CVE-2025-14840` · CVE record: Drupal HTTP Client Manager · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-754 - [ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function](https://agentprime.io/advisories/CVE-2026-22796.md) `CVE-2026-22796` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-754 - [Missing ASN1_TYPE validation in PKCS#12 parsing](https://agentprime.io/advisories/CVE-2026-22795.md) `CVE-2026-22795` · CVE record: OpenSSL OpenSSL · CVSS 5.5 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-754 - [Missing ASN1_TYPE validation in TS_RESP_verify_response() function](https://agentprime.io/advisories/CVE-2025-69420.md) `CVE-2025-69420` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-754 - [Denial of Service in Pix-Link LV-WR21Q](https://agentprime.io/advisories/CVE-2025-12387.md) `CVE-2025-12387` · CVE record: Pix-Link LV-WR21Q and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-754 - [libceph: return the handler error from mon_handle_auth_done()](https://agentprime.io/advisories/CVE-2026-22992.md) `CVE-2026-22992` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-754 - [go-tuf affected by client DoS via malformed server response](https://agentprime.io/advisories/GHSA-846p-jg2w-w324.md) `GHSA-846p-jg2w-w324`, `CVE-2026-23991`, `GO-2026-4348` · Go `github.com/theupdateframework/go-tuf/v2`: affected `<2.3.1`, fixed in `2.3.1` · CVSS 5.9 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Denial of service, CWE-754 - [Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop](https://agentprime.io/advisories/CVE-2026-21910.md) `CVE-2026-21910` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap](https://agentprime.io/advisories/CVE-2025-60011.md) `CVE-2025-60011` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server](https://agentprime.io/advisories/CVE-2025-59960.md) `CVE-2025-59960` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal](https://agentprime.io/advisories/CVE-2026-0227.md) `CVE-2026-0227` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp](https://agentprime.io/advisories/CVE-2026-21693.md) `CVE-2026-21693` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-681, CWE-754 - [iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp](https://agentprime.io/advisories/CVE-2026-21689.md) `CVE-2026-21689` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-232, CWE-690 - [Improper implementation of Modbus protocol leading to DOS attack](https://agentprime.io/advisories/CVE-2025-4675.md) `CVE-2025-4675` · CVE record: ABB WebPro SNMP Card PowerValue and 1 more · CVSS 7.1 High · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-754 - [Improper check for unusual conditions in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2025-20761.md) `CVE-2025-20761` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.5 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-754 - [Improper check for unusual conditions in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)](https://agentprime.io/advisories/CVE-2025-66357.md) `CVE-2025-66357` · CVE record: Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001) · CVSS 6.9 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)](https://agentprime.io/advisories/CVE-2025-61976.md) `CVE-2025-61976` · CVE record: Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001) · CVSS 8.7 High · Not analysed yet · Published 16 Dec 2025 · Tags: CWE-754 - [Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2025-14322.md) `CVE-2025-14322` · CVE record: Mozilla Firefox and 1 more · CVSS 8.0 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-754 - [Improper check for unusual conditions in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2025-33201.md) `CVE-2025-33201` · CVE record: NVIDIA Triton Inference Server · CVSS 7.5 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-754 - [WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction](https://agentprime.io/advisories/CVE-2025-64704.md) `CVE-2025-64704` · CVE record: bytecodealliance wasm-micro-runtime · CVSS 4.7 Medium · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-754 - [Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock](https://agentprime.io/advisories/CVE-2025-62875.md) `CVE-2025-62875` · CVE record: SUSE openSUSE Tumbleweed · CVSS 6.9 Medium · Not analysed yet · Published 20 Nov 2025 · Tags: CWE-754 - [ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability](https://agentprime.io/advisories/CVE-2025-64342.md) `CVE-2025-64342` · CVE record: espressif esp-idf · CVSS 6.9 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: CWE-754 - [PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets](https://agentprime.io/advisories/CVE-2025-4619.md) `CVE-2025-4619` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 13 Nov 2025 · Tags: CWE-754 - [Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden.](https://agentprime.io/advisories/GHSA-83v7-c2cf-p9c2.md) `GHSA-83v7-c2cf-p9c2`, `BIT-drupal-2025-13080`, `CVE-2025-13080`, `DRUPAL-CORE-2025-005`, `PKSA-bn52-vyzy-rmnm` · Packagist `drupal/core`: affected `>=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8`, fixed in `10.4.9`, `10.5.6`, `11.1.9`, `11.2.8` · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) QAT Windows software](https://agentprime.io/advisories/CVE-2025-32088.md) `CVE-2025-32088` · CVE record: Intel(R) QAT Windows software · CVSS 4.8 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-754 - [Malformed KMIP response may result in access violation](https://agentprime.io/advisories/CVE-2025-12657.md) `CVE-2025-12657` · CVE record: MongoDB Inc. MongoDB Server · CVSS 5.9 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-754 - [InventoryGui affected by item duplication in GUIs which use GuiStorageElement](https://agentprime.io/advisories/GHSA-598q-jw82-5w66.md) `GHSA-598q-jw82-5w66`, `CVE-2025-62783` · Maven `de.themoep:inventorygui`: affected `<1.6.2-SNAPSHOT`, fixed in `1.6.2-SNAPSHOT` · CVSS 5.0 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-754, CWE-837 - [Oxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional Conditions](https://agentprime.io/advisories/CVE-2025-10937.md) `CVE-2025-10937` · CVE record: Oxford Nano Technologies MinKNOW · CVSS 6.8 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-754 - [Mastodon quotes control can be bypassed](https://agentprime.io/advisories/CVE-2025-62605.md) `CVE-2025-62605` · CVE record: mastodon mastodon · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2025 · Tags: CWE-754 - [Incorrect Content-Type Header](https://agentprime.io/advisories/CVE-2025-11925.md) `CVE-2025-11925` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2025 · Tags: CWE-754 - [Mattermost Desktop DoS when user has basic authentication server configured](https://agentprime.io/advisories/CVE-2025-55035.md) `CVE-2025-55035` · CVE record: Mattermost Mattermost · CVSS 6.1 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Fortinet FortiProxy and others](https://agentprime.io/advisories/CVE-2024-26008.md) `CVE-2024-26008` · CVE record: Fortinet FortiProxy and 3 more · CVSS 5.0 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash](https://agentprime.io/advisories/CVE-2025-60004.md) `CVE-2025-60004` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-754 - [Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE](https://agentprime.io/advisories/CVE-2025-59958.md) `CVE-2025-59958` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-754 - [@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user](https://agentprime.io/advisories/GHSA-m8rj-ppph-mj33.md) `GHSA-m8rj-ppph-mj33`, `CVE-2025-61668` · npm `@plone/volto`: affected `<16.34.1 || >=17.0.0, <17.22.2 || >=18.0.0, <18.27.2 || >=19.0.0-alpha.1, <19.0.0-alpha.6`, fixed in `16.34.1`, `17.22.2`, `18.27.2`, `19.0.0-alpha.6` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2025 · Tags: Memory corruption, CWE-754 - [Kata Containers coco-tdx malicious host can circumvent initdata verification](https://agentprime.io/advisories/CVE-2025-58354.md) `CVE-2025-58354` · CVE record: kata-containers kata-containers · CVSS 6.9 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-754 - [Incorrect boundary conditions in the JavaScript: GC component](https://agentprime.io/advisories/CVE-2025-10532.md) `CVE-2025-10532` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-754 - [Cache exploitation vulnerability](https://agentprime.io/advisories/CVE-2025-8716.md) `CVE-2025-8716` · CVE record: OpenText OpenText Content Management · CVSS 5.8 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: CWE-754 - [tls: fix handling of zero-length records on the rx_list](https://agentprime.io/advisories/CVE-2025-39682.md) `CVE-2025-39682` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-754 - [Improper validation of packets sequencing](https://agentprime.io/advisories/CVE-2025-9998.md) `CVE-2025-9998` · CVE record: arcinfo PcVue · CVSS 6.0 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Google Android](https://agentprime.io/advisories/CVE-2025-48581.md) `CVE-2025-48581` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-754 - [Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence](https://agentprime.io/advisories/GHSA-w92j-c6gr-hj8r.md) `GHSA-w92j-c6gr-hj8r`, `CVE-2025-53514`, `GO-2025-3871` · Go `github.com/mattermost/mattermost-plugin-confluence`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 5.9 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-754 - [Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence](https://agentprime.io/advisories/GHSA-vc77-c2hx-h5x2.md) `GHSA-vc77-c2hx-h5x2`, `CVE-2025-52931`, `GO-2025-3870` · Go `github.com/mattermost/mattermost-plugin-confluence`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-754 - [Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence](https://agentprime.io/advisories/GHSA-gjpm-6w34-ppvf.md) `GHSA-gjpm-6w34-ppvf`, `CVE-2025-54463`, `GO-2025-3866` · Go `github.com/mattermost/mattermost-plugin-confluence`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 5.9 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-754 - [Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External](https://agentprime.io/advisories/CVE-2025-24975.md) `CVE-2025-24975` · CVE record: FirebirdSQL firebird · CVSS 7.1 High · Not analysed yet · Published 15 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) 800 Series Ethernet](https://agentprime.io/advisories/CVE-2025-24303.md) `CVE-2025-24303` · CVE record: Intel(R) 800 Series Ethernet · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) PROSet/Wireless WiFi Software for Windows](https://agentprime.io/advisories/CVE-2025-20625.md) `CVE-2025-20625` · CVE record: Intel(R) PROSet/Wireless WiFi Software for Windows · CVSS 7.1 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Intel(R) 800 Series Ethernet](https://agentprime.io/advisories/CVE-2025-20093.md) `CVE-2025-20093` · CVE record: Intel(R) 800 Series Ethernet · CVSS 8.6 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Siemens SIPROTEC 4 6MD61 and others](https://agentprime.io/advisories/CVE-2024-52504.md) `CVE-2024-52504` · CVE record: Siemens SIPROTEC 4 6MD61 and 4 more · CVSS 8.7 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in EMQX](https://agentprime.io/advisories/CVE-2025-52136.md) `CVE-2025-52136` · CVE record: EMQX EMQX · CVSS 3.0 Low · Not analysed yet · Published 10 Aug 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2025-24224.md) `CVE-2025-24224` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 7.5 High · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-754 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .