CWE-754

Medium likelihood

Improper Check for Unusual or Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

605 vulnerabilities with CWE-754
CVE-2024-50602 MEDIUM
Netapp Active IQ Unified Manager < 2.6.4 - Improper Condition Check
CVSS 5.9
CVE-2024-47727 HIGH
Linux Kernel 5.19-6.11.2 - Unauthenticated Memory Access via MMIO #VE Exception Handling
CVSS 7.8
CVE-2024-45085 MEDIUM
IBM WebSphere Application Server 8.5.0.0-8.5.5.26 - Denial of Service via Crafted Request
CVSS 5.9
CVE-2024-47507 MEDIUM
Juniper Networks Junos OS/Junos OS Evolved - Info Disclosure
CVSS 5.8
CVE-2024-47503 MEDIUM
Juniper Networks Junos OS - DoS
CVSS 6.5
CVE-2024-47499 HIGH
Junos OS and Junos OS Evolved - Unauthenticated Denial of Service via Malformed BGP AS PATH Attribute
CVSS 7.5
CVE-2024-9469 MEDIUM
Cortex XDR Agent 7.9-7.9.101 - Detection Mechanism Bypass via Non-Administrative Privileges
CVSS 5.5
CVE-2024-27457 LOW
Intel(R) TDX Module <1.5.06 - Info Disclosure
CVSS 2.5
CVE-2024-9124 HIGH
Rockwell Automation PowerFlex 600T - Denial of Service via Request Overload
CVSS 7.5
CVE-2024-34664 MEDIUM
Android Knox Guard - Physical Bypass via Improper Exception Handling
CVSS 4.1
CVE-2024-7826 CRITICAL
Webroot SecureAnywhere Web Shield < 2.1.2.3 - Functionality Misuse via wrURL.Dll
CVSS 9.8
CVE-2024-8175 HIGH
CODESYS Control SL < 4.14.0.0 - Unauthenticated Denial of Service via Memory Access
CVSS 7.5
CVE-2024-20506 MEDIUM
ClamAV <1.4.0 - Privilege Escalation
CVSS 6.1
CVE-2024-20089 HIGH
Yocto - Denial of Service via Incorrect Error Handling in WLAN
CVSS 7.5
CVE-2024-2502 LOW
Series 2 HSE-SVH <2.2.5 - Info Disclosure
CVSS 2.0
CVE-2024-42411 MEDIUM
Mattermost <9.9.1, 9.5.7, 9.10.0, 9.8.2 - Info Disclosure
CVSS 5.3
CVE-2024-42284 HIGH
Linux Kernel - Buffer Overflow in TIPC UDP Address String Conversion
CVSS 7.8
CVE-2024-40619 HIGH
Rockwellautomation Rockwell Automation ControlLogix and GuardLogix 5580 - Denial of Service via Malformed CIP Packet
CVSS 7.5
CVE-2024-21806 MEDIUM
Intel(R) Ethernet Network Controllers <28.3 - DoS
CVSS 5.5
CVE-2024-43044 HIGH
Jenkins < 2.452.4 and < 2.471 - Arbitrary File Read via ClassLoaderProxy#fetchJar
CVSS 8.8
CVE-2024-39832 MEDIUM
Mattermost 9.5.0-9.5.6 9.7.0-9.7.5 9.8.0-9.8.1 9.9.0 - Unauthenticated Local Data Deletion via Error Handling Abuse
CVSS 6.8
CVE-2024-42224 MEDIUM
Linux Kernel - Denial of Service via Incorrect Empty List Check in mv88e6xxx_default_mdio_bus
CVSS 6.1
CVE-2024-42162 HIGH
Linux Kernel 5.3-6.9.8 - Denial of Service via Invalid NIC Stats Array Access
CVSS 7.0
CVE-2024-42160 HIGH
Linux Kernel - Improper Check for Unusual or Exceptional Conditions in f2fs_build_fault_attr()
CVSS 7.8
CVE-2024-42159 HIGH
Linux Kernel - Integer Overflow in SCSI MPI3MR Driver via mr_sas_port->phy_mask
CVSS 7.8
Details
Vulnerabilities 605
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits