CWE-754: Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- mattermost confluence, confluence plugin +1 moreUnexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Medium
- mattermost confluence, confluence plugin +1 moreUnexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Medium
- mattermost confluence, confluence plugin +1 moreUnexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 High
- emqxIn EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web...3.0 Low
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 18.5, iOS 18.5 and...7.5 High
- vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 moreDenial-of-service vulnerability4.4 Medium
- polkadot-evm frontierPolkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price6.9 Medium
- vectorized soladySolady lacks extcodesize validation on implementation in ERC4337Factory6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash8.7 High
- debian linux, linux kernel +1 morex86/sgx: Prevent attempts to reclaim poisoned pages5.5 Medium
github.com/babylonlabs-io/babylonGo,github.com/babylonlabs-io/babylon/v2Go +1 moreBabylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary8.9 High- broadcom brocade fabric os, brocade fabric os, broadcom fabric operating system +2 moreDenial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability6.8 Medium
- rust-ethereum ethereumethereum does not check transaction malleability for EIP-2930, EIP-1559 and EIP-7702 transactions6.9 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timing7.6 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbDisabled Abortion Flag8.0 High
- hitachi energy relion 670/650 and sam600-ioAn authenticated user with file access privilege via FTP access can cause the Relion 670/650 and...7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets8.2 High
- No product listedImproper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to...5.7 Medium
- No product listedImproper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform...5.1 Medium
- phoenix securecore technology 4, phoenixtech securecore technology +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore...3.3 Low
- cisco ios xe software, ios xe +1 moreA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker...6.7 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker...6.7 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker...4.6 Medium
- proofpoint enterprise protectionEnterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass6.1 Medium
- 7-zip7-Zip through 24.09 does not report an error for certain invalid xz files, involving stream flags...2.5 Low
- 7-zip7-Zip through 24.09 does not report an error for certain invalid xz files, involving block flags...2.5 Low
- nullsoft scriptable install system, siemens simatic technology package tpcamgen, simotion oa miif +3 more +5 moreNullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate...8.1 High
- palo alto networks prisma access browserPrisma Access Browser: Inappropriate control behavior in Prisma Access Browser9.3 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed6.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block8.7 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreGnuplot: segmentation fault via io_str_init_static_internal function6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: segmentation fault when parsing malformed data uri5.9 Medium
- openvpnOpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to...7.5 High
- gnupgIn GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data...2.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame6.8 Medium
- ibm mqIBM MQ denial of service5.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the Agent6.8 Medium
- mattermost, mattermost server +1 moreLeaked User IDs and Metadata of Deleted DMs3.1 Low
- ibm iIBM i denial of service6.5 Medium
- mediatek software development kit, mediatek, inc. mt7981, mt7986 +1 moreIn network HW, there is a possible system hang due to an uncaught exception. This could lead to...7.5 High
- ibm security verify directoryIBM Security Verify Directory denial of service7.5 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma...5.5 Medium
- matrix-org matrix-hookshotmatrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support6.5 Medium
- phoenix securecore™ for intel coffee lake, securecore™ for intel comet lake, securecore™ for intel ice lake +2 more +4 moreUnsafe Handling of IHV UEFI Variables4.6 Medium
- phoenix securecore™ for intel coffee lake, securecore™ for intel comet lake, securecore™ for intel ice lake +2 more +4 moreUnsafe Handling of Phoenix UEFI Variables4.6 Medium
- mattermost, mattermost server +1 moreMisleading UI for undefined admin console settings in Calls causes security confusion3.5 Low
- linux, linux kernel +1 moredrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check5.5 Medium
- Show moreLoading…