CWE-754

Medium likelihood

Improper Check for Unusual or Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

605 vulnerabilities with CWE-754
CVE-2024-56777 MEDIUM
Linux Kernel 4.6-5.15.173, 5.16-6.1.119, 6.2-6.6.63, 6.7-6.12.3 - Null Pointer Dereference in sti_gdp_atomic_check
CVSS 5.5
CVE-2024-56776 MEDIUM
Linux Kernel 4.6-6.12.3 DoS via DRM Atomic State Error Pointer Dereference
CVSS 5.5
CVE-2024-56728 MEDIUM
Linux Kernel - Denial of Service via Missing Error Check in otx2_ethtool.c
CVSS 5.5
CVE-2024-56725 MEDIUM
Linux Kernel 5.18-6.1.119, 6.2-6.6.63, 6.7-6.11.10, 6.12.0-6.12.1 - DoS via Missing Error Check in otx2_dcbnl.c
CVSS 5.5
CVE-2024-56692 MEDIUM
Linux Kernel - Denial of Service via F2FS Node Truncation
CVSS 5.5
CVE-2024-3393 HIGH KEV
Palo Alto Networks PAN-OS >= 11.1.0 < 11.1.1 - Unauthenticated Denial of Service via Malicious DNS Packet
CVSS 7.5
CVE-2024-51470 MEDIUM
IBM MQ Appliance 9.1.0.0-9.1.0.25, 9.4.0.0-9.4.0.6 & MQ for HPE NonStop 8.1.0-8.1.0.25 - DoS via Improper Message Values
CVSS 6.5
CVE-2024-54116 MEDIUM
HarmonyOS - Out-of-Bounds Read in M3U8 Module
CVSS 4.3
CVE-2024-54115 MEDIUM
HarmonyOS - Out-of-Bounds Read in DASH Module
CVSS 4.3
CVE-2024-54114 MEDIUM
HarmonyOS - Denial of Service via DASH Module Playback Out-of-Bounds Access
CVSS 4.4
CVE-2024-11599 HIGH
Mattermost <10.0.1-9.5.11 - Info Disclosure
CVSS 8.2
CVE-2024-53916 HIGH
OpenStack Neutron <25.0.1 - Privilege Escalation
CVSS 7.5
CVE-2024-53432 HIGH
PCL 1.14.1 - Denial of Service via Malformed PLY File Parsing
CVSS 7.5
CVE-2024-50284 MEDIUM
Linux Kernel 5.15.145-5.15.x - Denial of Service via Missing xa_store Error Check
CVSS 5.5
CVE-2024-52316 CRITICAL
Apache Tomcat - Unchecked Error Condition
CVSS 9.8
CVE-2024-10945 HIGH
Affecting Product - Privilege Escalation
CVSS 7.3
CVE-2024-43435 MEDIUM
Moodle < 4.1.12 and 4.4.0-4.4.2 - Insufficient Capability Check in Glossary Restore
CVSS 5.3
CVE-2024-35427 MEDIUM
vmir - Denial of Service via Export Function in Wasm Parser
CVSS 5.5
CVE-2024-35424 MEDIUM
vmir e8117 - Segmentation Violation in import_function
CVSS 5.5
CVE-2024-35421 MEDIUM
vmir e8117 - Denial of Service via wasm_parse_block Function
CVSS 5.5
CVE-2024-50196 MEDIUM
Linux Kernel < 5.15.169, 5.16.0-6.1.114, 6.2.0-6.6.58, 6.7.0-6.11.5 - DoS via Pinctrl Ocelot Level Interrupt Handling
CVSS 5.5
CVE-2024-50195 MEDIUM
Linux Kernel 2.6.39-6.11.4 - Time Validation Bypass in posix-clock
CVSS 5.5
CVE-2024-50184 MEDIUM
Linux Kernel 5.3-6.11.3 - DoS via Unchecked Device Status in virtio_pmem_flush
CVSS 5.5
CVE-2024-44235 MEDIUM
iPadOS < 18.1 - Unprotected User Data Exposure via Lock Screen
CVSS 4.6
CVE-2024-44174 MEDIUM
macOS < 15.0 - Unprotected User Data Exposure via Lock Screen
CVSS 5.5
Details
Vulnerabilities 605
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits