CWE-754: Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed5.9 Medium
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment7.5 High
- huawei emuiUncaptured exceptions in the home screen module. Successful exploitation of this vulnerability...5.3 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability8.6 High
- @clerk fastifyDenial of service in Fastify via Content-Type header7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn wlan, there is a possible use after free due to an incorrect status check. This could lead to...6.7 Medium
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 moreImproper checking of AP-S lock bit while verifying the secure resource group permissions can lead...6.8 Medium
- wolfsslAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...7.5 High
- hcl software versionvault expressOverload/denial of service affects HCL VersionVault Express7.5 High
- vercel next.jsUnexpected server crash in Next.js version 12.2.35.3 Medium
- nginx njsAn issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set...7.5 High
- xpdf project xpdfXPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar()...5.5 Medium
- xpdf project xpdfXPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*)...5.5 Medium
- xpdf project xpdfXPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow(...5.5 Medium
- swfmillSWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader:...5.5 Medium
- swfmillSWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody:...5.5 Medium
- swfmillSWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF:...5.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN6.1 Medium
- gallagher controller 6000, controller 6000 firmware +1 moreGallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets...7.5 High
- lettersanitizer project lettersanitizerImproper handling of CSS at-rules in lettersanitizer7.5 High
- nextauth.js next-authImproper Handling of `callbackUrl` parameter in next-auth7.5 High
- samsung internetImproper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address...4.3 Medium
- elastic elasticsearchImproper Check for Unusual or Exceptional Conditions in Elasticsearch7.5 High
- google androidIn transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to...9.8 Critical
- f5 njsNginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...5.3 Medium
- samsung galaxy s22 firmware, samsung mobile devices +1 moreGiven the TEE is compromised and controlled by the attacker, improper state maintenance in...4.4 Medium
- flask-session-captcha project flask-session-captchaPotential Captcha Validate Bypass in flask-session-captcha5.3 Medium
- cisco unified communications managerCisco Unified Communications Products Denial of Service Vulnerability5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received6.5 Medium
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet7.5 High
- ecto project ectoEcto missing `is_nil` requirement9.8 Critical
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions7.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...5.3 Medium
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +134 more +136 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...7.5 High
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...7.5 High
- intel ac3168 firmware, ac 1550 firmware, ac 3165 firmware +13 more +15 moreImproper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM)...5.7 Medium
- intel integrated performance primitives cryptographyImproper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an...5.5 Medium
- google tensorflowCrash when type cannot be specialized in Tensorflow6.5 Medium
- google tensorflowCrash due to erroneous `StatusOr` in Tensorflow5.9 Medium
- google tensorflowSegfault in `simplifyBroadcast` in Tensorflow5.9 Medium
- abb pni800, spiet800, pni800 firmware +1 more +3 moreSECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module7.5 High
- google tensorflowAssertion failure based denial of service in Tensorflow6.5 Medium
- google tensorflowType confusion leading to segfault in Tensorflow6.5 Medium
- Show moreLoading…