CWE-754 · Improper Check for Unusual or Exceptional Conditions (page 5)
Page 5 of 7 — CVEs classified under CWE-754, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29278 | High | 8.2 | 2022-11-15 | Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver… |
CVE-2022-20950 | Medium | 5.8 | 2022-11-15 | A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to caus… |
CVE-2022-26079 | Medium | 6.0 | 2022-11-11 | Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable es… |
CVE-2022-20426 | Medium | 5.5 | 2022-11-08 | In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion. This could lea… |
CVE-2022-3616 | Medium | 5.4 | 2022-10-28 | Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash… |
CVE-2022-22238 | Medium | 5.3 | 2022-10-18 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al… |
CVE-2022-22235 | Medium | 5.9 | 2022-10-18 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows a… |
CVE-2022-22227 | Medium | 5.3 | 2022-10-18 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Ser… |
CVE-2022-22218 | High | 7.5 | 2022-10-18 | On SRX Series devices, an Improper Check for Unusual or Exceptional Conditions when using Certificate Management Protocol Version 2 (CMPv2) auto re-enrollment… |
CVE-2022-41587 | Medium | 5.3 | 2022-10-14 | Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. |
CVE-2022-39288 | High | 7.5 | 2022-10-10 | fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content… |
CVE-2022-20837 | High | 8.6 | 2022-10-10 | A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow… |
CVE-2022-32590 | Medium | 6.7 | 2022-10-07 | In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-35108 | Medium | 6.8 | 2022-09-02 | Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivit… |
CVE-2022-36046 | Medium | 5.3 | 2022-08-31 | Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js… |
CVE-2022-38152 | High | 7.5 | 2022-08-31 | An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes… |
CVE-2022-27563 | High | 7.5 | 2022-08-30 | An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. |
CVE-2022-35173 | High | 7.5 | 2022-08-18 | An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segme… |
CVE-2022-38235 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. |
CVE-2022-38234 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc. |
CVE-2022-38233 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc. |
CVE-2022-36145 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord(). |
CVE-2022-36141 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::write(SWF::Writer*, SWF::Context*). |
CVE-2022-36140 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF::Writer*, SWF::Context*). |
CVE-2022-35473 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7. |
CVE-2022-35469 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384. |
CVE-2022-22217 | Medium | 6.1 | 2022-07-20 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent una… |
CVE-2022-26078 | High | 7.5 | 2022-07-06 | Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Ga… |
CVE-2022-31103 | High | 7.5 | 2022-06-27 | lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of ser… |
CVE-2022-31093 | High | 7.5 | 2022-06-27 | NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using Nex… |
CVE-2022-20130 | Critical | 9.8 | 2022-06-15 | In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code executi… |
CVE-2022-30738 | Medium | 4.3 | 2022-06-07 | Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script. |
CVE-2022-23712 | High | 7.5 | 2022-06-06 | A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node… |
CVE-2022-29369 | High | 7.5 | 2022-05-12 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c. |
CVE-2022-29473 | Medium | 5.9 | 2022-05-05 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured… |
CVE-2022-28706 | Medium | 5.9 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause… |
CVE-2022-26130 | Medium | 5.3 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when… |
CVE-2022-28793 | Medium | 4.4 | 2022-05-03 | Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot… |
CVE-2022-24880 | Medium | 5.3 | 2022-04-25 | flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1… |
CVE-2022-20804 | Medium | 5.3 | 2022-04-21 | A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Managemen… |
CVE-2022-22196 | Medium | 6.5 | 2022-04-14 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al… |
CVE-2022-22194 | High | 7.5 | 2022-04-14 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PT… |
CVE-2022-22185 | High | 7.5 | 2022-04-14 | A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a Denial of Service (DoS) by sending a spe… |
CVE-2022-25252 | High | 7.5 | 2022-03-16 | When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an excepti… |
CVE-2022-24323 | Medium | 5.3 | 2022-03-09 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon control… |
CVE-2021-42020 | High | 7.5 | 2022-03-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2021-3560 | High | 7.8 | 2022-02-16 | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user… |
CVE-2022-24321 | High | 7.5 | 2022-02-09 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when recei… |
CVE-2021-33147 | Medium | 5.5 | 2022-02-09 | Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure… |
CVE-2021-33139 | Medium | 5.7 | 2022-02-09 | Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authentic… |
CVE-2022-23593 | Medium | 5.9 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segf… |
CVE-2022-23590 | Medium | 5.9 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process t… |
CVE-2022-23572 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is… |
CVE-2021-22285 | High | 7.5 | 2022-02-04 | Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allo… |
CVE-2022-21737 | Medium | 6.5 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by pass… |
CVE-2021-22816 | High | 7.5 | 2022-01-28 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially… |
CVE-2022-22180 | High | 7.5 | 2022-01-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhau… |
CVE-2022-22171 | High | 7.5 | 2022-01-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthentica… |
CVE-2022-21676 | High | 7.5 | 2022-01-12 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP reques… |
CVE-2021-37862 | Low | 3.7 | 2021-12-17 | Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using at… |
CVE-2021-43801 | High | 7.5 | 2021-12-13 | Mercurius is a GraphQL adapter for Fastify. Any users from Mercurius@8.10.0 to 8.11.1 are subjected to a denial of service attack by sending a malformed JSON t… |
CVE-2021-25525 | Low | 2.0 | 2021-12-08 | Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recog… |
CVE-2021-41135 | Medium | 6.5 | 2021-10-20 | The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deter… |
CVE-2021-31364 | Medium | 5.9 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on… |
CVE-2021-31361 | Medium | 5.3 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on… |
CVE-2021-31351 | High | 7.5 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious atta… |
CVE-2021-25481 | Medium | 6.4 | 2021-10-06 | An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP… |
CVE-2021-39162 | High | 8.6 | 2021-09-09 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are rec… |
CVE-2020-19766 | High | 7.5 | 2021-09-07 | The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration variable, compromising access control… |
CVE-2021-39196 | High | 7.7 | 2021-09-07 | pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the RES… |
CVE-2021-40523 | High | 7.5 | 2021-09-05 | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT… |
CVE-2021-33605 | Medium | 4.3 | 2021-08-25 | Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin… |
CVE-2021-32780 | High | 8.6 | 2021-08-24 | Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 c… |
CVE-2021-0408 | Medium | 5.5 | 2021-08-18 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-38599 | High | 7.5 | 2021-08-12 | WAL-G before 1.1, when a non-libsodium build (e.g., one of the official binary releases published as GitHub Releases) is used, silently ignores the libsodium e… |
CVE-2021-0002 | High | 7.1 | 2021-08-11 | Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially e… |
CVE-2021-21563 | Medium | 6.5 | 2021-08-03 | Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an… |
CVE-2021-22447 | High | 7.5 | 2021-08-02 | There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the… |
CVE-2021-0288 | Medium | 6.5 | 2021-07-15 | A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs (Modular Po… |
CVE-2021-0287 | Medium | 6.5 | 2021-07-15 | In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Se… |
CVE-2021-0286 | High | 7.5 | 2021-07-15 | A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to th… |
CVE-2021-0282 | High | 7.5 | 2021-07-15 | On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon (RPD) cr… |
CVE-2021-0281 | Medium | 5.9 | 2021-07-15 | On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific packet from th… |
CVE-2021-26038 | High | 7.5 | 2021-07-07 | An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A default syste… |
CVE-2021-32946 | High | 7.8 | 2021-06-17 | An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from t… |
CVE-2021-33622 | Critical | 9.8 | 2021-06-15 | Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value. |
CVE-2021-21439 | Medium | 6.5 | 2021-06-14 | DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or i… |
CVE-2021-25425 | Medium | 5.3 | 2021-06-11 | Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component. |
CVE-2021-26197 | Medium | 6.5 | 2021-06-10 | An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file. |
CVE-2020-12292 | Medium | 5.5 | 2021-06-09 | Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2020-36382 | High | 7.5 | 2021-06-04 | OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data… |
CVE-2021-22747 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module… |
CVE-2021-22746 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module… |
CVE-2021-22745 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module… |
CVE-2021-22744 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module… |
CVE-2021-22743 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module res… |
CVE-2021-22742 | Low | 3.9 | 2021-05-26 | Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module… |
CVE-2021-29607 | Medium | 5.3 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit undefined… |
CVE-2021-29544 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.QuantizeAn… |
CVE-2021-29534 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.SparseConc… |