Advisories · Weakness
CWE-754.
Every Advisory and CVE whose sources give the weakness CWE-754, newest first.
- CVSS 4.4 Medium
Denial-of-service vulnerability
- VMware vCenter
- VMware Cloud Foundation
- CWE-754
- CVSS 6.9 Medium
Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price
- polkadot-evm frontier
- CWE-682
- CWE-754
- CVSS 6.9 Medium
Solady lacks extcodesize validation on implementation in ERC4337Factory
- Vectorized solady
- CWE-754
- CVSS 8.7 High
Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.8 Medium
Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability
- Broadcom Brocade Fabric OS
- CWE-754
- CVSS 6.9 Medium
ethereum does not check transaction malleability for EIP-2930, EIP-1559 and EIP-7702 transactions
- CWE-754
<0.18.0 · fixed in 0.18.0
GHSA-3w94-vq2x-v5wr · CVE-2025-53359 - CVSS 8.0 High
Disabled Abortion Flag
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- CWE-754
- CVSS 7.1 High
Improper check for unusual conditions in Hitachi Energy Relion 670/650 and SAM600-IO
- Hitachi Energy Relion 670/650 and SAM600-IO
- CWE-754
- CVSS 8.2 High
PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks PAN-OS
- CWE-754
- CVSS 5.7 Medium
Improper check for unusual conditions in Intel(R) Arc™ GPU
- Intel(R) Arc™ GPU
- CWE-754
- CVSS 5.1 Medium
Improper check for unusual conditions in Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CWE-754
- CVSS 3.3 Low
Improper check for unusual conditions in Phoenix SecureCore Technology 4
- Phoenix SecureCore Technology 4
- CWE-754
- CVSS 6.7 Medium
Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
- CVSS 6.7 Medium
Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
- CVSS 4.6 Medium
Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
- CVSS 6.1 Medium
Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
- Proofpoint Enterprise Protection
- CWE-754
- CVSS 2.5 Low
Improper check for unusual conditions in 7-Zip
- 7-Zip
- CWE-754
- CVSS 2.5 Low
Improper check for unusual conditions in 7-Zip
- 7-Zip
- CWE-754
- CVSS 8.1 High
Improper check for unusual conditions in Nullsoft Scriptable Install System
- Nullsoft Scriptable Install System
- CWE-754
- CVSS 4.0 Medium
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed
- CWE-754
>=1.3.0, <2.0.9 || >=3.0.0, <3.0.5 · fixed in 2.0.9, 3.0.5
GHSA-9gqv-wp59-fq42 · CVE-2025-32997 - CVSS 9.3 CriticalCritical · CVSS 9+
Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser
- Palo Alto Networks Prisma Access Browser
- Authentication bypass
- CWE-754
- CVSS 8.7 High
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks PAN-OS
- CWE-754
- CVSS 8.7 High
Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 8.7 High
Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.2 Medium
Gnuplot: segmentation fault via io_str_init_static_internal function
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- CWE-754
- CVSS 5.9 Medium
Libsoup: segmentation fault when parsing malformed data uri
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-754
- CVSS 7.5 High
Improper check for unusual conditions in OpenVPN
- OpenVPN
- CWE-754
- CVSS 2.7 Low
Improper check for unusual conditions in GnuPG
- GnuPG
- CWE-754
- CVSS 6.8 Medium
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
- Palo Alto Networks PAN-OS
- Palo Alto Networks Cloud NGFW
- CWE-754
- CVSS 5.5 Medium
IBM MQ denial of service
- IBM MQ
- CWE-754
- CVSS 6.8 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-754
- CVSS 3.1 Low
Leaked User IDs and Metadata of Deleted DMs
- Mattermost
- CWE-754
- CVSS 6.5 Medium
IBM i denial of service
- i
- CWE-754
- CVSS 7.5 High
IBM Security Verify Directory denial of service
- IBM Security Verify Directory
- CWE-754
- CVSS 5.5 Medium
Improper check for unusual conditions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-754
- CVSS 6.5 Medium
matrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support
- matrix-org matrix-hookshot
- CWE-754
- CVSS 4.6 Medium
Unsafe Handling of IHV UEFI Variables
- Phoenix SecureCore™ for Intel Kaby Lake
- Phoenix SecureCore™ for Intel Coffee Lake
- CWE-754
- CVSS 4.6 Medium
Unsafe Handling of Phoenix UEFI Variables
- Phoenix SecureCore™ for Intel Kaby Lake
- Phoenix SecureCore™ for Intel Coffee Lake
- CWE-754
- CVSS 3.5 Low
Mattermost has Improper Check for Unusual or Exceptional Conditions
- CWE-754
<8.0.0-20250102081831-64c566a8280b || >=10.0, <10.3.0 · fixed in 8.0.0-20250102081831-64c566a8280b, 10.3.0
GHSA-7rgp-4j56-fm79 · CVE-2025-22445 - CVSS 5.5 Medium
drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
- Linux kernel
- CWE-754
- CVSS 5.5 Medium
drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- Linux kernel
- CWE-754
- CVSS 5.5 Medium
drm/sti: avoid potential dereference of error pointers
- Linux kernel
- CWE-754
- CVSS 5.5 Medium
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- Linux kernel
- CWE-754
- CVSS 5.5 Medium
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
- Linux kernel
- CWE-754
- CVSS 7.8 High
f2fs: fix to do sanity check on node blkaddr in truncate_node()
- Linux kernel
- CWE-754
- CVSS 8.7 HighCritical · KEV, CVSS 7+ and EPSSKEV
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks PAN-OS
- CWE-754
- CVSS 6.5 Medium
IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- CWE-754
- CVSS 4.3 Medium
Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
- CVSS 4.3 Medium
Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
- CVSS 4.4 Medium
Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
- CVSS 8.2 High
Domain Restriction Bypass on Registration
- Mattermost
- CWE-754
- CVSS 7.5 High
OpenStack Neutron can use an incorrect ID during policy enforcement
- CWE-345
- CWE-754
>=23.0.0, <23.2.1 || >=24.0.0, <24.0.2 || >=25.0.0, <25.0.1 · fixed in 23.2.1, 24.0.2, 25.0.1
GHSA-f27h-g923-68hw · CVE-2024-53916 - CVSS 7.5 High
While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at.
- CWE-754
- CVSS 7.5 High
ksmbd: Fix the missing xa_store error check
- Linux kernel
- CWE-754
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Tomcat - Authentication Bypass
- CWE-391
- CWE-754
<9.0.96 || >=10.1.0-M1, <10.1.30 || >=11.0.0-M1, <11.0.1 · fixed in 9.0.96, 10.1.30, 11.0.1
GHSA-xcpr-7mr4-h4xq · CVE-2024-52316 - CVSS 7.0 High
FactoryTalk® Updater Local Privilege Escalation
- Rockwell Automation FactoryTalk Updater
- CWE-754
- CVSS 5.3 Medium
Moodle has insufficient capability checks
- CWE-754
<4.1.12 || >=4.2.0, <4.2.9 || >=4.3.0, <4.3.6 || >=4.4.0, <4.4.2 · fixed in 4.1.12, 4.2.9, 4.3.6, 4.4.2
GHSA-4gq2-x5w4-7hp8 · CVE-2024-43435 - CVSS 5.5 Medium
pinctrl: ocelot: fix system hang on level based interrupts
- Linux kernel
- CWE-754