CWE-754: Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeImproper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a...6.5 Medium
- google chromeImproper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeImproper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a...5.4 Medium
- xenforoXenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook8.7 High
- guno1928 alos-httpALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server7.5 High
- envoyproxy envoyEnvoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL_DST clusters5.3 Medium
- google chromeImproper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote...8.8 High
- google chromeImproper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote...8.1 High
- nettyNetty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext9.1 Critical
- linuxcpu: hotplug: Preserve per instance callback errors7.8 High
- nodejs undiciundici vulnerable to Denial of Service via WebSocketStream unclean close5.9 Medium
- forcepoint f1e macThis vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint...4.8 Medium
- @fastify/busboy, fastify fastify\/busyboy +1 more@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header7.5 High
- rustfsRustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted6.1 Medium
- intel neural processing unit driverImproper conditions check in the firmware for the Intel(R) NPU Driver for all versions within...6.9 Medium
- intel corporation intel(r) proset/wireless wifi software, intel proset\/wireless wifi +1 moreImproper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device...8.3 High
- intel neural processing unit driverImproper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User...6.9 Medium
- intel corporation intel(r) proset/wireless wifi software, intel proset\/wireless wifi +1 moreImproper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device...7.1 High
- intel proset\/wireless wifiImproper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring...7.1 High
- siemens desigo dxr2, desigo pxc3, desigo pxc4 +3 more +5 moreA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo...5.3 Medium
- sap approuter, sap se business ai platform (approuter) +1 moreMultiple vulnerabilities in SAP Business AI Platform (Approuter)3.7 Low
- estonian information system authority (ria) digidoc, digidoc4, libdigidocpp +2 moreSignature validation vulnerability affecting DigiDoc applications4.4 Medium
- atn-b1 cpdlcIn CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate7.1 High
- atn-b1 cpdlcIn CPDLC, Malformed or Out of Sequence Frames Can Cause Resets6.0 Medium
- epsilla-cloud vectordbepsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition4.8 Medium
- socketio socket.ioSocket.IO: Zero-attachment Memory Exhaustion7.5 High
- mediatek mt2718 firmware, mt6878 firmware, mt6895 firmware +9 more +11 moreIn imgsensor, there is a possible application crash due to incorrect error handling. This could...6.7 Medium
- schneider electric remoteconnect, scadapack 47x, scadapack 47xi +1 more +3 moreCWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause...9.3 Critical
- eugeny russhRussh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)5.3 Medium
- eugeny russhRussh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)5.3 Medium
- cure53 dompurifyDOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode2.3 Low
- nlnet labs unboundLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated5.9 Medium
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring7.8 High
- zalando skipperSkipper: an oversized declared-`Content-Length` body still hands OPA an empty `parsed_body`, so deny-on-presence Rego policies fail OPEN while the full payload reaches upstream8.2 High
- hcl software devops loopInsufficient Input Validation in DevOps Loop3.1 Low
- mattermost, mattermost desktop +1 morePosting a malicious markdown image crashes the Mattermost Desktop App6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes7.1 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash8.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing6.6 Medium
- phoenixframework phoenixPhoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff6.3 Medium
- fossbillingFOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment2.3 Low
- zcashfoundation zebraZebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC7.1 High
- surrealdbSurrealDB before 3.1.0 Denial of Service via LIVE Query7.1 High
- Show moreLoading…