CWE-754

Medium likelihood

Improper Check for Unusual or Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

605 vulnerabilities with CWE-754
CVE-2021-29607 MEDIUM
TensorFlow < 2.1.4 - Memory Corruption via SparseAdd Input Validation
CVSS 5.3
CVE-2021-29544 LOW
TensorFlow 2.4.0-2.4.1 - Denial of Service via QuantizeAndDequantizeV4Grad CHECK-Fail
CVSS 2.5
CVE-2021-29534 LOW
TensorFlow < 2.1.4 - Denial of Service via SparseConcat CHECK-Fail
CVSS 2.5
CVE-2021-29533 LOW
TensorFlow < 2.1.4 - Denial of Service via Empty Image to DrawBoundingBoxes
CVSS 2.5
CVE-2021-29531 LOW
TensorFlow < 2.1.4 - Denial of Service via Empty Input Tensor in PNG Encoding
CVSS 2.5
CVE-2021-0239 MEDIUM
Juniper Networks Junos OS Evolved - DoS
CVSS 6.5
CVE-2021-0236 MEDIUM
Juniper Junos OS 18.4-20.3 and Junos OS Evolved 18.4R1-EVO-20.3R2-EVO - Denial of Service via BGP FlowSpec Packet
CVSS 6.5
CVE-2021-0228 MEDIUM
Juniper Junos OS on MX Series - Denial of Service via Layer 2 Traffic in EVPN-VXLAN Configuration
CVSS 6.5
CVE-2021-0225 MEDIUM
Juniper Networks Junos OS Evolved - Info Disclosure
CVSS 5.8
CVE-2021-23372 MEDIUM
mongo-express - Denial of Service via Empty Collection CSV Export
CVSS 4.4
CVE-2021-21773 HIGH
Accusoft ImageGear 19.8 - Out-of-Bounds Write via TIFF Header Processing
CVSS 7.8
CVE-2021-1446 HIGH
Cisco IOS XE - Unauthenticated Denial of Service via DNS ALG Packet Inspection
CVSS 8.6
CVE-2021-21375 MEDIUM
PJSIP < 2.10 - Denial of Service via Malformed 183 Responses
CVSS 6.5
CVE-2021-27568 MEDIUM
netplex json-smart-v1/v2 - Info Disclosure
CVSS 5.9
CVE-2021-0339 HIGH
Android - Local Privilege Escalation via WindowContainer Animation Handling
CVSS 7.8
CVE-2021-21285 MEDIUM
Docker < 19.03.15 and 20.10.3 - Denial of Service via Malformed Image Manifest
CVSS 6.5
CVE-2021-0211 CRITICAL
Junos OS and Junos OS Evolved - Denial of Service via BGP FlowSpec Message Handling
CVSS 10.0
CVE-2020-19766 HIGH
tokenerc20 - Access Control Bypass via Duration Variable Manipulation
CVSS 7.5
CVE-2020-12292 MEDIUM
Intel Thunderbolt Firmware - Authenticated Denial of Service via Improper Conditions Check
CVSS 5.5
CVE-2020-36382 HIGH
OpenVPN Access Server 2.7.3-2.8.7 - Denial of Service via Incorrect Authentication Token Data
CVSS 7.5
CVE-2020-24450 HIGH
Intel(R) Graphics Drivers <26.20.100.8141-15.45.32.5145-15.40.46.51...
CVSS 7.8
CVE-2020-27274 HIGH
Honeywell OPC UA Tunneller < 6.3.0.8233 - Denial of Service via Unchecked Malloc Return Value
CVSS 7.5
CVE-2020-35931 HIGH
Foxit Reader and PhantomPDF < 10.1.1 - Certified PDF Spoofing via Evil Annotation Attack
CVSS 7.8
CVE-2020-24677 HIGH
S+ Operations & S+ Historian - RCE/Priv Escalation
CVSS 8.8
CVE-2020-7549 MEDIUM
Modicon M340 and Legacy Modicon Firmware - Denial of Service via Crafted HTTP Requests
CVSS 5.3
Details
Vulnerabilities 605
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits