CWE-754.

Improper check for unusual conditions in Android

• Android
• CWE-754

OctoRPKI crashes when max iterations is reached

• Denial of service
• CWE-754

<1.4.4 · fixed in 1.4.4

Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed

• Juniper Networks Junos OS
• CWE-754

Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization

• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment

• Juniper Networks Junos OS
• CWE-754

Improper check for unusual conditions in EMUI

• EMUI
• CWE-754

fastify vulnerable to denial of service via malicious Content-Type

• CWE-754

>=4.0.0, <4.8.1 · fixed in 4.8.1

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

• Cisco IOS XE Software
• CWE-754

Overload/denial of service affects HCL VersionVault Express

• HCL Software HCL VersionVault Express
• CWE-754

Unexpected server crash in Next.js

• CWE-248
• CWE-754

>=12.2.3, <12.2.4 · fixed in 12.2.4

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

• Juniper Networks Junos OS
• CWE-754

Improper check for unusual conditions in Gallagher Controller 6000

• Gallagher Controller 6000
• CWE-754

Improper handling of CSS at-rules in lettersanitizer

• CWE-754

<1.0.2 · fixed in 1.0.2

Improper Handling of `callbackUrl` parameter in next-auth

• CWE-754

<3.29.5 || >=4.0.0, <4.5.0 · fixed in 3.29.5, 4.5.0

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

• CWE-754

>=8.0.0, <8.2.1 · fixed in 8.2.1

Improper check for unusual conditions in F5 BIG-IP

• F5 BIG-IP
• CWE-754

Improper check for unusual conditions in F5 BIG-IP

• F5 BIG-IP
• CWE-754

Improper check for unusual conditions in F5 BIG-IP

• F5 BIG-IP
• CWE-754

Improper check for unusual conditions in Samsung Mobile Devices

• Samsung Mobile Devices
• CWE-754

Potential Captcha Validate Bypass in flask-session-captcha

• CWE-253
• CWE-394

<1.2.1 · fixed in 1.2.1

Cisco Unified Communications Products Denial of Service Vulnerability

• Cisco Unified Communications Manager
• CWE-754

Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart

• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

• Juniper Networks Junos OS
• CWE-754

Ecto missing `is_nil` requirement

• CWE-754

>=2.2.0, <2.2.1 · fixed in 2.2.1

Incomplete validation in `SparseSparseMinimum`

• CWE-754

<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2

Improper check for unusual conditions in Schneider Electric EcoStruxure Process Expert and others

• Schneider Electric EcoStruxure Process Expert
• Schneider Electric EcoStruxure Control Expert
• CWE-754

Improper check for unusual conditions in Siemens RUGGEDCOM i800 and others

• Siemens RUGGEDCOM i800
• Siemens RUGGEDCOM i800NC
• CWE-754

Type confusion leading to segfault in Tensorflow

• Memory corruption
• CWE-754

<2.5.3 || >=2.6.0, <2.6.3 || >=2.7.0, <2.7.1 · fixed in 2.5.3, 2.6.3, 2.7.1

Assertion failure based denial of service in Tensorflow

• Denial of service
• CWE-754

<2.5.3 || >=2.6.0, <2.6.3 || >=2.7.0, <2.7.1 · fixed in 2.5.3, 2.6.3, 2.7.1

Segfault in `simplifyBroadcast` in Tensorflow

• CWE-754

>=2.8.0-rc0, <2.8.0 · fixed in 2.8.0

Crash due to erroneous `StatusOr` in TensorFlow

• CWE-754

<2.7.1 · fixed in 2.7.1

Crash when type cannot be specialized in Tensorflow

• Denial of service
• CWE-754

<2.5.3 || >=2.6.0, <2.6.3 || >=2.7.0, <2.7.1 · fixed in 2.5.3, 2.6.3, 2.7.1

Improper check for unusual conditions in ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions)…

• ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
• CWE-754

Improper check for unusual conditions in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products

• Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products
• CWE-754

Improper check for unusual conditions in Intel(R) IPP Crypto library

• Intel(R) IPP Crypto library
• CWE-754

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

• ABB SPIET800
• ABB PNI800
• CWE-754
• CWE-755

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets

• Juniper Networks Junos OS
• CWE-754

Junos OS: Specific packets over VXLAN cause FPC reset

• Juniper Networks Junos OS
• CWE-754

Uncaught Exception in engine.io

• CWE-754
• CWE-755

>=4.0.0, <4.1.2 || >=5.0.0, <5.2.1 || >=6.0.0, <6.1.1 · fixed in 4.1.2, 5.2.1, 6.1.1

Improper check for unusual conditions in Mattermost

• Mattermost
• CWE-754

Uncaught Exception in mercurius

• CWE-754

>=8.10.0, <8.11.2 · fixed in 8.11.2

Authz Module Non-Determinism

• CWE-754

>=0.43.0, <0.44.2 · fixed in 0.44.2

Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received

• Juniper Networks Junos OS
• Race condition
• CWE-754

Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated

• Juniper Networks Junos OS
• CWE-754
• CWE-755

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

• Juniper Networks Junos OS
• CWE-754

Denial of Service (DoS) in mongo-express

• CWE-754

<=0.54.0 · no fixed version yet

Improper check for unusual conditions in Samsung Mobile Devices

• Samsung Mobile Devices
• CWE-754

Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

• CWE-754

>=12.0.0, <14.6.8 || >=15.0.0, <20.0.6 · fixed in 14.6.8, 20.0.6

Incorrect handling of H/2 GOAWAY followed by SETTINGS frames

• envoy
• CWE-754

Improper check for unusual conditions in Dell PowerScale OneFS

• Dell PowerScale OneFS
• CWE-754

Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Improper check for unusual conditions in Drawings SDK

• Drawings SDK
• CWE-754

Improper Check for Unusual or Exceptional Conditions in json-smart

• CWE-754

<1.3.2 || >=2.4.0, <2.4.1 || >=2.0.0, <2.3.1 · fixed in 1.3.2, 2.4.1, 2.3.1

Possible DoS attack using a special crafted URL in email body

• OTRS AG ((OTRS)) Community Edition
• OTRS
• CWE-754

Improper check for unusual conditions in OpenVPN Access Server

• OpenVPN Access Server
• CWE-754