Advisories · Weakness
CWE-754.
Every Advisory and CVE whose sources give the weakness CWE-754, newest first.
- CVSS 6.5 Medium
moby docker daemon crash during image pull of malicious image
- Denial of service
- CWE-754
<19.3.15 || >=20.10.0-beta1, <20.10.3 · fixed in 19.3.15, 20.10.3
GHSA-6fj5-m822-rqx8 · CVE-2021-21285 - CVSS 5.3 Medium
BuildKit vulnerable to possible panic when incorrect parameters sent from frontend
- CWE-754
<0.12.5 · fixed in 0.12.5
GHSA-9p26-698r-w4hx · CVE-2024-23650 - CVSS 4.8 Medium
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
- CWE-754
<0.4.0 · fixed in 0.4.0
GHSA-x2c2-q32w-4w6m · CVE-2024-24567 - CVSS 6.3 Medium
Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines
- Lamassu Bitcoin ATM Douro machines
- CWE-754
- CVSS 7.5 High
Unauthenticated Denial of Service (DOS) attack in AnythingLLM
- Mintplex-Labs anything-llm
- CWE-754
- CVSS 7.5 High
Improper Check or Handling of Exceptional Conditions in Aveva PI Server
- Aveva PI Server
- CWE-703
- CWE-754
- CVSS 7.5 High
Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.5 Medium
Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.8 Medium
msgpackr's conversion of property names to strings can trigger infinite recursion
- Denial of service
- CWE-754
<1.10.1 · fixed in 1.10.1
GHSA-7hpj-7hhx-2fgx · CVE-2023-52079 - CVSS 3.9 Low
Possible buffer overread from reading DNS responses
- Zabbix
- CWE-754
- CVSS 6.8 Medium
Improper check for unusual conditions in Siemens SINEC INS
- Siemens SINEC INS
- CWE-754
- CVSS 4.3 Medium
Playbook plugin crash via missing interface type assertion
- Mattermost
- CWE-754
-
Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
- CVSS 6.8 Medium
Azure RTOS USBX Remote Code Execution Vulnerability
- azure-rtos usbx
- Memory corruption
- CWE-754
- CVSS 6.7 Medium
Azure RTOS USBX Remote Code Execution Vulnerability
- azure-rtos usbx
- Memory corruption
- CWE-754
- CVSS 4.3 Medium
Improper check for unusual conditions in Zoom Video Communications, Inc. Zoom Clients
- Zoom Video Communications, Inc. Zoom Clients
- CWE-754
- CVSS 7.5 High
Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
- CVSS 4.3 Medium
Mattermost denial of service vulnerability
- CWE-754
<7.8.12 · fixed in 7.8.12
GHSA-xvq6-h898-wcj8 · CVE-2023-5967 - CVSS 7.5 High
Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
- CWE-703
- CWE-754
>=1.31.0, <1.33.0 · fixed in 1.33.0
GHSA-r344-xw3p-2frj · CVE-2023-45812 - CVSS 7.5 High
Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.8 Medium
Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.5 Medium
Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE
- Juniper Networks Junos OS Evolved
- CWE-754
-
Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Improper check for unusual conditions in Apple macOS
- Apple macOS
- CWE-754
- CVSS 7.8 HighCritical · KEVKEV
Improper check for unusual conditions in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- CWE-754
- CVSS 6.4 Medium
ITM Server Communications Hijack
- Proofpoint ITM Server
- CWE-754
- CVSS 7.5 High
Browsing Context potentially not cleared when closing Private Window
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-754
- CVSS 6.0 Medium
Electron context isolation bypass via nested unserializable return value
- CWE-754
<22.3.6 || >=23.0.0-alpha.1, <23.2.3 || >=24.0.0-alpha.1, <24.0.1 || >=25.0.0-alpha.1, <25.0.0-alpha.2 · fixed in 22.3.6, 23.2.3, 24.0.1, 25.0.0-alpha.2
GHSA-p7v2-p9m8-qqg7 · CVE-2023-29198 - CVSS 6.5 Medium
Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication
- Axis Communications AB AXIS A1001 Network Door Controller
- Axis Communications AB AXIS A1210-B Network Door Controller
- CWE-754
- CWE-1286
- CVSS 7.5 High
Feathers socket handler allows abusing implicit toString
- CWE-754
<4.5.18 || >=5.0.0, <5.0.8 · fixed in 4.5.18, 5.0.8
GHSA-hhr9-rh25-hvf9 · CVE-2023-37899 - CVSS 7.5 High
Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel
- Juniper Networks Junos OS
- CWE-754
- CVSS 3.3 Low
Improper check for unusual conditions in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-754
-
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3.
- CWE-754
- CVSS 5.3 Medium
Shopware improper mail validation vulnerability
- CWE-754
>=5.1.4, <5.7.18 · fixed in 5.7.18
GHSA-gh66-fp7j-98v5 · CVE-2023-34099 - CVSS 5.3 Medium
ink! vulnerable to incorrect decoding of storage value when using `DelegateCall`
- CWE-253
- CWE-754
>=4.0.0, <4.2.1 · fixed in 4.2.1
GHSA-853p-5678-hv8f · CVE-2023-34449 - CVSS 6.5 Medium
Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-754
- CVSS 6.5 Medium
Denial of Service via the 'dump' SPL command
- Splunk Enterprise
- Splunk Cloud Platform
- CWE-754
- CVSS 7.3 High
Insufficient validation when decoding a Socket.IO packet
- CWE-20
- CWE-754
<3.3.4 || >=3.4.0, <3.4.3 || >=4.0.4, <4.2.3 · fixed in 3.3.4, 3.4.3, 4.2.3
GHSA-cqmj-92xf-r6r9 · CVE-2023-32695 - CVSS 7.8 High
Improper check for unusual conditions in Android
- Android
- CWE-754
- CVSS 6.5 Medium
Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)
- CWE-754
- CVSS 7.5 High
Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)
- CWE-754
- CVSS 4.7 Medium
Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.5 High
Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.4 High
Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.5 High
libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c.
- CWE-754
- CVSS 6.5 Medium
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
- CWE-754
- CVSS 5.3 Medium
Improper Check for Unusual or Exceptional Conditions
- ABB AC500 V2
- CWE-754
- CVSS 5.9 Medium
IPFS go-bitfield vulnerable to DoS via malformed size arguments
- CWE-754
- CWE-1284
<1.1.0 · fixed in 1.1.0
GHSA-2h6c-j3gf-xp9r · CVE-2023-23626 - CVSS 4.8 Medium
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
- CWE-754
>=1.8, <39.0.1 · fixed in 39.0.1
GHSA-w7pp-m8wf-vj6r · CVE-2023-23931 - CVSS 4.3 Medium
Improper check for unusual conditions in Zyxel NWA110AX firmware
- Zyxel NWA110AX firmware
- CWE-754
- CVSS 5.3 Medium
Froxlor contains Unchecked Error Condition
- CWE-391
- CWE-754
<2.0.10 · fixed in 2.0.10
GHSA-3chw-8jq2-w769 · CVE-2023-0572 - CVSS 7.5 High
Improper check for unusual conditions in Schneider Electric EcoStruxure Control Expert and others
- Schneider Electric EcoStruxure Control Expert
- Schneider Electric EcoStruxure Process Expert
- CWE-754
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-358
- CWE-754
- CVSS 8.2 High
Improper check for unusual conditions in Zyxel GS1920-24v2 firmware
- Zyxel GS1920-24v2 firmware
- CWE-754
- CVSS 5.3 Medium
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.
- CWE-754
- CVSS 5.3 Medium
Apache Traffic Server: Improperly reading the client requests
- Apache Software Foundation Apache Traffic Server
- CWE-754
- CVSS 7.5 High
Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins
- Apache Software Foundation Apache Traffic Server
- CWE-754
- CVSS 6.7 Medium
Improper check for unusual conditions in Android
- Android
- CWE-754
- CVSS 8.2 High
Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS me…
- CWE-754
- CVSS 6.0 Medium
Improper check for unusual conditions in Intel(R) XMM(TM) 7560 Modem software
- Intel(R) XMM(TM) 7560 Modem software
- CWE-754