CWE-754: CWE-754

This vulnerability in Intel 800 Series Ethernet drivers allows authenticated local users to escalate privileges due to improper exception handling. It...

This vulnerability allows unauthenticated attackers to bypass email domain restrictions in Mattermost by submitting specially crafted email addresses ...

This vulnerability allows local users on Windows systems to escalate privileges to SYSTEM during NSIS installer execution. Attackers can exploit a rac...

The AppPresser WordPress plugin has an authentication bypass vulnerability in versions up to 4.3.2. Unauthenticated attackers can log in as any existi...

This CVE describes a sandbox escape vulnerability in Firefox and Thunderbird's Graphics: CanvasWebGL component due to incorrect boundary conditions. I...

This vulnerability in Intel 800 Series Ethernet drivers allows authenticated local users to escalate privileges due to improper condition checking. It...

This vulnerability in the Linux kernel's TDX (Trust Domain Extensions) implementation allows userspace processes to trick the kernel into performing M...

A buffer overflow vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem allows attackers to cause memory corrup...

This CVE is an integer overflow vulnerability in the Linux kernel's mpi3mr SCSI driver. It allows attackers to write beyond allocated memory bounds by...

This CVE describes a privilege escalation vulnerability in Apple operating systems that allows local attackers to gain elevated privileges. It affects...

This vulnerability allows local attackers to bypass shadow stack protection in the Android kernel, potentially leading to privilege escalation without...

This vulnerability in Axios allows attackers to cause denial of service by providing malicious configuration objects containing __proto__ as an own pr...

This vulnerability in Drupal HTTP Client Manager allows attackers to bypass access controls through forceful browsing, potentially accessing restricte...

A type confusion vulnerability in OpenSSL's TimeStamp Response verification allows attackers to cause denial of service by providing malformed timesta...

An unauthenticated attacker can send specially crafted requests to Palo Alto Networks PAN-OS firewalls, causing them to crash and enter maintenance mo...

CVE-2025-61976 is an improper condition check vulnerability in CHOCO TEI WATCHER mini (IB-MCT001) that allows remote attackers to send specially craft...

NVIDIA Triton Inference Server has a vulnerability where sending excessively large payloads can trigger improper condition checking, potentially causi...

An unauthenticated network attacker can cause a denial-of-service by sending a specific BGP EVPN update message to Juniper Junos OS and Junos OS Evolv...

A vulnerability in Siemens SIPROTEC 4 protection devices allows unauthenticated remote attackers to cause denial of service by exploiting improper han...

The Mattermost Confluence Plugin before version 1.5.0 contains an improper input validation vulnerability that allows attackers to crash the plugin by...

This vulnerability allows a remote attacker to cause unexpected system termination (crash/reboot) on affected Apple devices. It affects multiple Apple...

An unauthenticated attacker can cause denial-of-service on Juniper MX Series routers by sending high rates of specific GRE traffic. This causes the Pa...

This vulnerability in Juniper Networks Junos OS on MX Series routers allows crafted IPv6 traffic to cause a denial of service by permanently blocking ...

This vulnerability allows remote attackers to cause a denial of service in OpenVPN servers by corrupting and replaying network packets during the earl...

IBM Security Verify Directory versions 10.0 through 10.0.3 are vulnerable to denial of service when processing LDAP extended operations. Attackers can...

An unauthenticated attacker can send a malicious DNS packet through a Palo Alto Networks firewall's data plane, causing the firewall to reboot. Repeat...

This vulnerability in OpenStack Neutron allows unprivileged tenants to modify network tags on network objects they don't own due to improper policy en...

This vulnerability allows attackers to cause denial-of-service by crashing applications that use PCL 1.14.1 to process malicious PLY files. Anyone usi...

An unauthenticated attacker can cause denial of service by sending a specially crafted BGP update with a malformed AS PATH attribute to Juniper device...

A denial-of-service vulnerability in Rockwell Automation PowerFlex 600T drives allows attackers to make the device unavailable by overloading it with ...

An unauthenticated remote attacker can cause a denial-of-service (DoS) in CODESYS web servers by triggering invalid memory access. This affects indust...

An unauthenticated attacker can cause a denial of service by sending specially crafted IPsec negotiation packets to Juniper devices running vulnerable...

An unauthenticated attacker can cause a denial-of-service by sending specific valid TCP traffic to affected Juniper devices, triggering a Packet Forwa...

An unauthenticated network attacker can cause a denial-of-service by sending specific valid traffic to vulnerable Juniper SRX and NFX Series devices. ...

This vulnerability in iRODS allows attackers to cause the irodsServerMonPerf component to process a path that isn't a directory, potentially leading t...

An unauthenticated network attacker can crash the Routing Protocol Daemon (RPD) on Juniper Junos OS and Junos OS Evolved by sending a specific Dynamic...

This CVE describes a data verification error vulnerability in a kernel module that affects WLAN functionality. Successful exploitation could cause WLA...

This vulnerability involves uncaught exceptions in the NFC module, which could allow attackers to disrupt NFC functionality. Successful exploitation a...

This vulnerability allows network-based attackers to cause denial of service on Juniper MX Series routers by exploiting improper condition checking in...

CVE-2022-25024 is a denial-of-service vulnerability in the Python json2xml package where malformed input triggers an unhandled exception, crashing the...

Feathers.js Socket.io handler contains an uncaught exception vulnerability where specially crafted messages with invalid toString methods can crash th...

A vulnerability in Juniper Networks Junos OS on QFX10000 Series allows a network-based attacker to cause a persistent Denial of Service (DoS) by sendi...