# CWE-754.

Every Advisory and CVE whose sources give the weakness CWE-754, newest first.

## Records, newest first (an older page)

- [Improper check for unusual conditions in Triconex Model 3009 MP installed on Tricon V11.3.x systems](https://agentprime.io/advisories/CVE-2021-22747.md)
  `CVE-2021-22747` · CVE record: Triconex Model 3009 MP installed on Tricon V11.3.x systems · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Improper check for unusual conditions in Triconex Model 3009 MP installed on Tricon V11.3.x systems](https://agentprime.io/advisories/CVE-2021-22746.md)
  `CVE-2021-22746` · CVE record: Triconex Model 3009 MP installed on Tricon V11.3.x systems · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Improper check for unusual conditions in Triconex Model 3009 MP installed on Tricon V11.3.x systems](https://agentprime.io/advisories/CVE-2021-22745.md)
  `CVE-2021-22745` · CVE record: Triconex Model 3009 MP installed on Tricon V11.3.x systems · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Improper check for unusual conditions in Triconex Model 3009 MP installed on Tricon V11.3.x systems](https://agentprime.io/advisories/CVE-2021-22744.md)
  `CVE-2021-22744` · CVE record: Triconex Model 3009 MP installed on Tricon V11.3.x systems · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Improper check for unusual conditions in Triconex TCM 4351B installed on Tricon V11.3.x systems.](https://agentprime.io/advisories/CVE-2021-22743.md)
  `CVE-2021-22743` · CVE record: Triconex TCM 4351B installed on Tricon V11.3.x systems. · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Improper check for unusual conditions in Triconex Model 3009 MP installed on Tricon V11.3.x systems](https://agentprime.io/advisories/CVE-2021-22742.md)
  `CVE-2021-22742` · CVE record: Triconex Model 3009 MP installed on Tricon V11.3.x systems · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-754
- [Ory fosite contains Improper Handling of Exceptional Conditions](https://agentprime.io/advisories/GHSA-7mqr-2v3q-v2wm.md)
  `GHSA-7mqr-2v3q-v2wm`, `CVE-2020-15223`, `GO-2021-0109` · Go `github.com/ory/fosite`: affected `<0.34.0`, fixed in `0.34.0` · CVSS 8.0 High · Not analysed yet · Published 24 May 2021 · Tags: CWE-754, CWE-755
- [CHECK-fail in \`QuantizeAndDequantizeV4Grad\`](https://agentprime.io/advisories/GHSA-6g85-3hm8-83f9.md)
  `GHSA-6g85-3hm8-83f9`, `BIT-tensorflow-2021-29544`, `CVE-2021-29544`, `PYSEC-2021-181`, `PYSEC-2021-472`, `PYSEC-2021-670` · PyPI `tensorflow` and 2 more: affected `>=2.4.0, <2.4.2`, fixed in `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-754
- [CHECK-fail in SparseConcat](https://agentprime.io/advisories/GHSA-6j9c-grc6-5m6g.md)
  `GHSA-6j9c-grc6-5m6g`, `BIT-tensorflow-2021-29534`, `CVE-2021-29534`, `PYSEC-2021-171`, `PYSEC-2021-462`, `PYSEC-2021-660` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-754
- [CHECK-fail in DrawBoundingBoxes](https://agentprime.io/advisories/GHSA-393f-2jr3-cp69.md)
  `GHSA-393f-2jr3-cp69`, `BIT-tensorflow-2021-29533`, `CVE-2021-29533`, `PYSEC-2021-170`, `PYSEC-2021-461`, `PYSEC-2021-659` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-754
- [CHECK-fail in tf.raw_ops.EncodePng](https://agentprime.io/advisories/GHSA-3qxp-qjq7-w4hf.md)
  `GHSA-3qxp-qjq7-w4hf`, `BIT-tensorflow-2021-29531`, `CVE-2021-29531`, `PYSEC-2021-168`, `PYSEC-2021-459`, `PYSEC-2021-657` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-754
- [Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.](https://agentprime.io/advisories/CVE-2021-0239.md)
  `CVE-2021-0239` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.](https://agentprime.io/advisories/CVE-2021-0236.md)
  `CVE-2021-0236` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment](https://agentprime.io/advisories/CVE-2021-0228.md)
  `CVE-2021-0228` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS Evolved: Stateless IP firewall filter does not work as expected](https://agentprime.io/advisories/CVE-2021-0225.md)
  `CVE-2021-0225` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.8 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11](https://agentprime.io/advisories/GHSA-jmx8-355m-8vwh.md)
  `GHSA-jmx8-355m-8vwh`, `CVE-2018-25007` · Maven `com.vaadin:flow-server`: affected `>=1.0.0, <1.0.6`, fixed in `1.0.6` · CVSS 2.6 Low · Not analysed yet · Published 19 Apr 2021 · Tags: CWE-754
- [Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11](https://agentprime.io/advisories/GHSA-3h5r-928v-mxhh.md)
  `GHSA-3h5r-928v-mxhh` · Maven `com.vaadin:vaadin-bom`: affected `>=10.0.0, <10.0.8 || >=11.0.0, <11.0.3`, fixed in `10.0.8`, `11.0.3` · CVSS 2.6 Low · Not analysed yet · Published 19 Apr 2021 · Tags: CWE-754
- [Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1446.md)
  `CVE-2021-1446` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-754
- [Improper check for unusual conditions in OPC UA Tunneller](https://agentprime.io/advisories/CVE-2020-27274.md)
  `CVE-2020-27274` · CVE record: OPC UA Tunneller · No CVSS score · Not analysed yet · Published 26 Jan 2021 · Tags: CWE-754
- [Insecure Web Service in Symphony Plus](https://agentprime.io/advisories/CVE-2020-24677.md)
  `CVE-2020-24677` · CVE record: ABB ABB Ability™ Symphony® Plus Operations and 1 more · CVSS 8.8 High · Not analysed yet · Published 22 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium…](https://agentprime.io/advisories/CVE-2020-7549.md)
  `CVE-2020-7549` · CVE record: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) · CVSS 7.5 High · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon…](https://agentprime.io/advisories/CVE-2020-7543.md)
  `CVE-2020-7543` · CVE record: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) · No CVSS score · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon…](https://agentprime.io/advisories/CVE-2020-7542.md)
  `CVE-2020-7542` · CVE record: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) · No CVSS score · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium…](https://agentprime.io/advisories/CVE-2020-7539.md)
  `CVE-2020-7539` · CVE record: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) · No CVSS score · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon…](https://agentprime.io/advisories/CVE-2020-7537.md)
  `CVE-2020-7537` · CVE record: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) · No CVSS score · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon M340 CPUs (BMXP34\* versions prior to V3.30) and Modicon M340…](https://agentprime.io/advisories/CVE-2020-7536.md)
  `CVE-2020-7536` · CVE record: Modicon M340 CPUs (BMXP34\* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4, BMXNOE0110 (H) versions prior to V6.6, and BMXNOR0200H all versions) · No CVSS score · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-754
- [Improper check for unusual conditions in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)](https://agentprime.io/advisories/CVE-2020-7538.md)
  `CVE-2020-7538` · CVE record: PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) · No CVSS score · Not analysed yet · Published 19 Nov 2020 · Tags: CWE-754
- [PAN-OS: Threat signatures are evaded by specifically crafted packets](https://agentprime.io/advisories/CVE-2020-1999.md)
  `CVE-2020-1999` · CVE record: Palo Alto Networks PAN-OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2020 · Tags: CWE-754
- [gdm3 would start gnome-initial-setup if it cannot contact accountservice](https://agentprime.io/advisories/CVE-2020-16125.md)
  `CVE-2020-16125` · CVE record: Gnome GDM3 · CVSS 7.2 High · Not analysed yet · Published 10 Nov 2020 · Tags: CWE-754
- [Integer truncation in Shard API usage](https://agentprime.io/advisories/GHSA-h6fg-mjxg-hqq4.md)
  `GHSA-h6fg-mjxg-hqq4`, `BIT-tensorflow-2020-15202`, `CVE-2020-15202`, `PYSEC-2020-125`, `PYSEC-2020-282`, `PYSEC-2020-317` · PyPI `tensorflow` and 2 more: affected `<1.15.4 || >=2.0.0, <2.0.3 || >=2.1.0, <2.1.2 || >=2.2.0, <2.2.1 || >=2.3.0, <2.3.1`, fixed in `1.15.4`, `2.0.3`, `2.1.2`, `2.2.1`, `2.3.1` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2020 · Tags: CWE-197, CWE-754
- [Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3421.md)
  `CVE-2020-3421` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-754
- [Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3480.md)
  `CVE-2020-3480` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-754
- [Gorouter is vulnerable to DoS attack via invalid HTTP responses](https://agentprime.io/advisories/CVE-2020-5420.md)
  `CVE-2020-5420` · CVE record: Cloud Foundry Routing and 1 more · CVSS 7.7 High · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-754
- [Cisco IOS XR Software Additional Paths Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3449.md)
  `CVE-2020-3449` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon Quantum Ethernet Network module and Quantum / Premium COPRO (Quantum…](https://agentprime.io/advisories/CVE-2020-7477.md)
  `CVE-2020-7477` · CVE record: Modicon Quantum Ethernet Network module and Quantum / Premium COPRO (Quantum Ethernet Network module 140NOE771x1, versions 7.0 and prior, Quantum processors with integrated Ethernet – 140CPU65xxxxx, all versions, Premium processors with integrated Ethernet, all versions) · CVSS 7.5 High · Not analysed yet · Published 23 Mar 2020 · Tags: CWE-754
- [Potential buffer overflow in psd-tools](https://agentprime.io/advisories/GHSA-22jr-vc7j-g762.md)
  `GHSA-22jr-vc7j-g762`, `CVE-2020-10571`, `PYSEC-2020-91` · PyPI `psd-tools`: affected `>=1.8.37, <1.9.4`, fixed in `1.9.4` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Mar 2020 · Tags: CWE-754
- [Segmentation faultin TensorFlow when converting a Python string to \`tf.float16\`](https://agentprime.io/advisories/GHSA-977j-xj7q-2jr9.md)
  `GHSA-977j-xj7q-2jr9`, `BIT-tensorflow-2020-5215`, `CVE-2020-5215`, `PYSEC-2020-258`, `PYSEC-2020-303`, `PYSEC-2020-338` · PyPI `tensorflow` and 2 more: affected `<1.15.2 || >=2.0.0, <2.0.1`, fixed in `1.15.2`, `2.0.1` · CVSS 5.0 Medium · Not analysed yet · Published 28 Jan 2020 · Tags: CWE-754
- [Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-15989.md)
  `CVE-2019-15989` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum…](https://agentprime.io/advisories/CVE-2018-7794.md)
  `CVE-2018-7794` · CVE record: Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum…](https://agentprime.io/advisories/CVE-2019-6857.md)
  `CVE-2019-6857` · CVE record: Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2020 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum…](https://agentprime.io/advisories/CVE-2019-6856.md)
  `CVE-2019-6856` · CVE record: Schneider Electric SE Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2020 · Tags: CWE-754
- [Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT](https://agentprime.io/advisories/GHSA-f6vf-pq8c-69m4.md)
  `GHSA-f6vf-pq8c-69m4`, `CVE-2019-17195` · Maven `com.nimbusds:nimbus-jose-jwt`: affected `<7.9`, fixed in `7.9` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 16 Oct 2019 · Tags: CWE-754, CWE-755
- [Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets](https://agentprime.io/advisories/CVE-2019-0068.md)
  `CVE-2019-0068` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-754
- [Improper check for unusual conditions in The Eclipse Foundation Eclipse Mosquitto](https://agentprime.io/advisories/CVE-2019-11779.md)
  `CVE-2019-11779` · CVE record: The Eclipse Foundation Eclipse Mosquitto · No CVSS score · Not analysed yet · Published 19 Sept 2019 · Tags: CWE-754
- [Improper check for unusual conditions in CVE-2019-6813 BMXNOR0200H Ethernet / Serial RTU module and others](https://agentprime.io/advisories/CVE-2019-6813.md)
  `CVE-2019-6813` · CVE record: CVE-2019-6813 BMXNOR0200H Ethernet / Serial RTU module and 1 more · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Modicon Quantum 140 NOE771x1](https://agentprime.io/advisories/CVE-2019-6811.md)
  `CVE-2019-6811` · CVE record: Schneider Electric SE Modicon Quantum 140 NOE771x1 · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Magelis HMI Panels](https://agentprime.io/advisories/CVE-2019-6833.md)
  `CVE-2019-6833` · CVE record: Schneider Electric SE Magelis HMI Panels · CVSS 6.5 Medium · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module](https://agentprime.io/advisories/CVE-2019-6831.md)
  `CVE-2019-6831` · CVE record: Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-754
- [Improper check for unusual conditions in Modicon Controllers, Modicon M340…](https://agentprime.io/advisories/CVE-2019-6819.md)
  `CVE-2019-6819` · CVE record: Modicon Controllers, Modicon M340 - firmware versions prior to V3.01 Modicon M580 - firmware versions prior to V2.80 All firmware versions of Modicon Quantum and Modicon Premium · CVSS 7.5 High · Not analysed yet · Published 22 May 2019 · Tags: CWE-754
- [Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1849.md)
  `CVE-2019-1849` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 16 May 2019 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SE Modicon M221, all references…](https://agentprime.io/advisories/CVE-2018-7789.md)
  `CVE-2018-7789` · CVE record: Schneider Electric SE Modicon M221, all references, all versions prior to firmware V1.6.2.0 · CVSS 4.8 Medium · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-754

Newest: <https://agentprime.io/advisories/tag/cwe-754.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-754&cursor=WyIyMDIxLTA2LTA0VDEwOjQ3OjE1LjAwMDAwMFoiLCJDVkUtMjAyMC0zNjM4MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-754/?cursor=WyIyMDIxLTA2LTA0VDEwOjQ3OjE1LjAwMDAwMFoiLCJDVkUtMjAyMC0zNjM4MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.