CWE-754.

Improper check for unusual conditions in Intel(R) NPU Drivers

• Intel(R) NPU Drivers
• CWE-754

Improper check for unusual conditions in Intel(R) Optane(TM) PMem management software

• Intel(R) Optane(TM) PMem management software
• CWE-754

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

• Prototype pollution
• CWE-754

<0.30.3 || >=1.0.0, <1.13.5 · fixed in 0.30.3, 1.13.5

Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001

• Drupal Group invite
• CWE-754

openmls has improper tag validation

• CWE-754

<0.7.2 · fixed in 0.7.2

ingress-nginx has Improper Check for Unusual or Exceptional Conditions

• CWE-754

<1.13.7 || >=1.14.0, <1.14.3 · fixed in 1.13.7, 1.14.3

Improper check for unusual conditions in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• CWE-754

Denial of Service (DoS) of VoIP Communication on TP-Link VX800v

• TP-Link Systems Inc. VX800v v1.0
• CWE-754

Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers

• kata-containers
• CWE-754

HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126

• Drupal HTTP Client Manager
• CWE-754

ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function

• OpenSSL
• CWE-754

Missing ASN1_TYPE validation in PKCS#12 parsing

• OpenSSL
• CWE-754

Missing ASN1_TYPE validation in TS_RESP_verify_response() function

• OpenSSL
• CWE-754

Denial of Service in Pix-Link LV-WR21Q

• Pix-Link LV-WR21Q
• Pix-Link WR21Q
• CWE-754

libceph: return the handler error from mon_handle_auth_done()

• Linux kernel
• CWE-754

go-tuf affected by client DoS via malformed server response

• Denial of service
• CWE-754

<2.3.1 · fixed in 2.3.1

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• CWE-754

iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-20

iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-20

Improper implementation of Modbus protocol leading to DOS attack

• ABB WebPro SNMP Card PowerValue
• ABB WebPro SNMP Card PowerValue UL
• CWE-754

Improper check for unusual conditions in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• CWE-754

Improper check for unusual conditions in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)

• Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
• CWE-754

Improper check for unusual conditions in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)

• Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
• CWE-754

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Improper check for unusual conditions in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• CWE-754

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

• bytecodealliance wasm-micro-runtime
• CWE-754

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

• openSUSE Tumbleweed
• CWE-754

ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

• espressif esp-idf
• CWE-754

PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• CWE-754

Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden.

• CWE-754

>=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8 · fixed in 10.4.9, 10.5.6, 11.1.9, 11.2.8

Improper check for unusual conditions in Intel(R) QAT Windows software

• Intel(R) QAT Windows software
• CWE-754

Malformed KMIP response may result in access violation

• MongoDB Inc. MongoDB Server
• CWE-754

InventoryGui affected by item duplication in GUIs which use GuiStorageElement

• CWE-754
• CWE-837

<1.6.2-SNAPSHOT · fixed in 1.6.2-SNAPSHOT

Oxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional Conditions

• Oxford Nano Technologies MinKNOW
• CWE-754

Mastodon quotes control can be bypassed

• mastodon
• CWE-754

Incorrect Content-Type Header

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4
• CWE-754

Mattermost Desktop DoS when user has basic authentication server configured

• Mattermost
• CWE-754

Improper check for unusual conditions in Fortinet FortiProxy and others

• Fortinet FortiProxy
• Fortinet FortiPAM
• CWE-754

Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE

• Juniper Networks Junos OS Evolved
• CWE-754

@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

• Memory corruption
• CWE-754

<16.34.1 || >=17.0.0, <17.22.2 || >=18.0.0, <18.27.2 || >=19.0.0-alpha.1, <19.0.0-alpha.6 · fixed in 16.34.1, 17.22.2, 18.27.2, 19.0.0-alpha.6

Kata Containers coco-tdx malicious host can circumvent initdata verification

• kata-containers
• CWE-754

Incorrect boundary conditions in the JavaScript: GC component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Cache exploitation vulnerability

• OpenText Content Management
• CWE-754

tls: fix handling of zero-length records on the rx_list

• Linux kernel
• CWE-754

Improper validation of packets sequencing

• arcinfo PcVue
• CWE-754

Improper check for unusual conditions in Google Android

• Google Android
• CWE-754

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence

• CWE-754

<1.5.0 · fixed in 1.5.0

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence

• CWE-754

<1.5.0 · fixed in 1.5.0

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence

• CWE-754

<1.5.0 · fixed in 1.5.0

Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

• firebird
• CWE-754

Improper check for unusual conditions in Intel(R) 800 Series Ethernet

• Intel(R) 800 Series Ethernet
• CWE-754

Improper check for unusual conditions in Intel(R) PROSet/Wireless WiFi Software for Windows

• Intel(R) PROSet/Wireless WiFi Software for Windows
• CWE-754

Improper check for unusual conditions in Intel(R) 800 Series Ethernet

• Intel(R) 800 Series Ethernet
• CWE-754

Improper check for unusual conditions in Siemens SIPROTEC 4 6MD61 and others

• Siemens SIPROTEC 4 6MD61
• Siemens SIPROTEC 4 6MD63
• CWE-754

Improper check for unusual conditions in EMQX

• EMQX
• CWE-754

Improper check for unusual conditions in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple iPadOS
• CWE-754