← Back
CWE-754

675 CVEs • Abstraction: Class • Likelihood of Exploit: Medium

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

JSON object

Loading...

CVEs (675)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ethereum
1Cpp Ethereum
Nov 21, 2024
Jan 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send mal...Show more
An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability.Show less
1Juniper
1Junos
Nov 21, 2024
Jan 10, 2018
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected re...Show more
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.Show less
2Canonical
Nasm
2Netwide Assembler
Ubuntu Linux
May 13, 2026
Dec 21, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum a...Show more
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.Show less
4Canonical
DebianLinux+1 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+7 more
May 13, 2026
Dec 11, 2017
N/A· v4
7.4 HIGH· v3
6.1 MEDIUM· v2
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
1Sdnsproxy Project
1Sdnsproxy
May 13, 2026
Dec 1, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
1Streamrelay
1Streamrelay
May 13, 2026
Dec 1, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
2Debian
Wireshark
2Debian Linux
Wireshark
May 13, 2026
Dec 1, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.
2Debian
Wireshark
2Debian Linux
Wireshark
May 13, 2026
Dec 1, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
2Debian
Wireshark
2Debian Linux
Wireshark
May 13, 2026
Dec 1, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.
1Xen
1Xen
May 13, 2026
Nov 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.
1Imagemagick
1Imagemagick
May 13, 2026
Aug 23, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
1Php
1Php
May 13, 2026
Jul 10, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter,...Show more
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.Show less
1Linux
1Linux Kernel
May 13, 2026
May 12, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first req...Show more
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399404. References: QC-CR#1094852.Show less
1Brocade
4Netiron Cer Series Firmware
Netiron Ces Series FirmwareNetiron Mlx Series Firmware+1 more
May 13, 2026
May 8, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause...Show more
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.Show less
5Debian
LinuxOracle+2 more
8Debian Linux
Enterprise Linux EusLinux+5 more
May 6, 2026
May 11, 2014
N/A· v4
N/A· v3
7.2 HIGH· v2
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree op...Show more
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.Show less