CWE-754: Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- google android, mediatek mt6739, mt6761 +29 more +31 moreIn pq, there is a possible write-what-where condition due to an incorrect bounds check. This...6.7 Medium
- linux, linux kernel +1 morenet/sched: act_ct: fix wild memory access when clearing fragments7.8 High
- linux, linux kernel +1 moref2fs: fix panic during f2fs_resize_fs()5.5 Medium
- linux, linux kernel +1 morei2c: validate user data in compat ioctl3.3 Low
- linux, linux kernel +1 moreARM: footbridge: fix PCI interrupt mapping5.5 Medium
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after opening7.5 High
- silabs.com pc controller, silabs z-wave pc-based controller +1 moreSilicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability6.5 Medium
- mozilla firefoxThe incorrect object was checked for NULL in the built-in profiler, potentially leading to...6.5 Medium
- mhenrixon sidekiq-unique-jobsCross-site Scripting sidekiq-unique-jobs UI server vulnerability7.1 High
- contribsys sidekiqCross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to...6.1 Medium
- contribsys sidekiqCross Site Scripting vulnerability in Contribsys Sidekiq6.1 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-0055.3 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 morecreate_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to...5.5 Medium
- linux kernel, fedoraproject fedora +1 moredm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in...5.5 Medium
- silabs gecko software development kit, silabs.com gsdk +1 moreZigbee Unauthenticated DoS via NWK Sequence number manipulation7.5 High
- moby buildkitBuildKit possible panic when incorrect parameters sent from frontend5.3 Medium
- vyperlang vyperraw_call `value=` kwargs not disabled for static and delegate calls4.8 Medium
- lamassu bitcoin atm douro machines, douro firmware, douro ii firmware +2 moreImproper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines6.3 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreUnauthenticated Denial of Service (DOS) attack in AnythingLLM7.5 High
- aveva pi serverImproper Check or Handling of Exceptional Conditions in Aveva PI Server7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific query via DREND causes rpd crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash6.5 Medium
- enviragallery envira gallery, smub envira gallery – image photo gallery, albums, video gallery, slideshows & more +1 moreEnvira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images4.3 Medium
- kriszyp msgpackrConversion of property names to strings can trigger infinite recursion6.8 Medium
- zabbix, zabbix zabbix-agent +1 morePossible buffer overread from reading DNS responses3.9 Low
- silabs.com gecko sdk, silabs z-wave software development kit +1 moreZ-Wave Denial of Service caused by Stream of Packets5.7 Medium
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected...6.8 Medium
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI...2.7 Low
- mattermost, mattermost server +1 morePlaybook plugin crash via missing interface type assertion4.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of data verification errors in the kernel module. Successful exploitation of this...7.5 High
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.8 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.7 Medium
- squid-cache squidDenial of Service in Helper Process management8.6 High
- zoom, zoom communications inc. clients, zoom meetings +2 more +4 moreImproper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to...4.3 Medium
- intel unison softwareUncaught exception for some Intel Unison software may allow an authenticated user to potentially...6.5 Medium
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the NFC module. Successful exploitation of this...7.5 High
- openssl, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +7 more +9 moreExcessive time spent in DH check / generation with large Q parameter value5.3 Medium
- mattermostDenial of Service via crashing the Calls Plugin4.3 Medium
- apollographql apollo router, router, apollo helms-charts router +2 moreImproper Check or Handling of Exceptional Conditions in apollo-router7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets5.8 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE6.5 Medium
- huawei emui, harmonyos +1 moreParameter verification vulnerability in the window module.Successful exploitation of this...5.3 Medium
- nodebbNodeBB Pre-Authentication Denial-of-Service7.5 High
- apple macos, ipad os, ipados +13 more +15 moreThe issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura...8.8 High
- apple ipados, macos, ios and ipados +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS...7.8 High
hpackcrates.ioHPACK decoder panics on invalid input7.5 High- proofpoint insider threat management, itm server, insider threat management server +2 moreITM Server Communications Hijack6.4 Medium
- electronContext isolation bypass via nested unserializable return value in Electron6.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private Window7.5 High
- Show moreLoading…