CWE-754 对因果或异常条件的不恰当检查 类弱点 329 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-754 属于异常条件检查不当漏洞，指软件未正确验证低频但关键的异常状态，如内存不足或权限受限。攻击者常通过耗尽资源或模拟恶意客户端触发这些未处理条件，导致服务拒绝或逻辑错误。开发者应完善错误处理机制，对所有预期外的系统状态进行严格校验与防御性编程，确保在极端情况下仍能安全降级或报错，避免程序崩溃或被利用。
char buf[10], cp_buf[10]; fgets(buf, 10, stdin); strcpy(cp_buf, buf);buf = (char*) malloc(req_size); strncpy(buf, xfer, req_size);| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-22235 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS | 5.9 | Medium | 2022-10-18 |
| CVE-2022-22227 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS Evolved | 5.3 | Medium | 2022-10-18 |
| CVE-2022-20837 | Cisco IOS XE Software 代码问题漏洞 — Cisco IOS XE Software | 8.6 | High | 2022-10-10 |
| CVE-2022-39288 | Fastify 代码问题漏洞 — fastify | 7.5 | High | 2022-10-10 |
| CVE-2022-27563 | HCL Technologies VersionVault Express 代码问题漏洞 — HCL VersionVault Express | 7.5 | High | 2022-08-30 |
| CVE-2022-22217 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS | 6.1 | Medium | 2022-07-20 |
| CVE-2022-26078 | Gallagher Controller 6000 安全漏洞 — Gallagher Controller 6000 | 7.5 | High | 2022-07-06 |
| CVE-2022-31103 | lettersanitizer 代码问题漏洞 — lettersanitizer | 7.5 | High | 2022-06-27 |
| CVE-2022-31093 | ZEIT Next.js 代码问题漏洞 — next-auth | 7.5 | High | 2022-06-27 |
| CVE-2022-23712 | Elasticsearch 安全漏洞 — elasticsearch | 7.5 | - | 2022-06-06 |
| CVE-2022-29473 | F5 BIG-IP 代码问题漏洞 — BIG-IP | 5.9 | Medium | 2022-05-05 |
| CVE-2022-28706 | F5 BIG-IP 代码问题漏洞 — BIG-IP | 5.9 | Medium | 2022-05-05 |
| CVE-2022-26130 | F5 BIG-IP 代码问题漏洞 — BIG-IP | 5.3 | Medium | 2022-05-05 |
| CVE-2022-28793 | Samsung Galaxy S3 代码问题漏洞 — Samsung Mobile Devices | 4.4 | Medium | 2022-05-03 |
| CVE-2022-20804 | Cisco Unified Communications Manager 代码问题漏洞 — Cisco Unified Communications Manager | 5.3 | Medium | 2022-04-21 |
| CVE-2022-22196 | Juniper Networks Junos OS和Junos OS Evolved 代码问题漏洞 — Junos OS | 6.5 | Medium | 2022-04-14 |
| CVE-2022-22194 | Juniper Networks Junos OS和Junos OS Evolved 代码问题漏洞 — Junos OS Evolved | 7.5 | High | 2022-04-14 |
| CVE-2022-22185 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS | 7.5 | High | 2022-04-14 |
| CVE-2022-24323 | Schneider Electric EcoStruxure Control Expert和Schneider Electric EcoStruxure Process Exper 代码问题漏洞 — EcoStruxure Process Expert | 5.3 | Medium | 2022-03-09 |
| CVE-2021-42020 | Siemens RUGGEDCOM代码问题漏洞 — RUGGEDCOM i800 | 7.5 | High | 2022-03-08 |
| CVE-2022-24321 | EcoStruxure Geo SCADA Expert 代码问题漏洞 — ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions) | 7.5 | - | 2022-02-09 |
| CVE-2022-23572 | Google TensorFlow 代码问题漏洞 — tensorflow | 6.5 | Medium | 2022-02-04 |
| CVE-2022-23590 | Google TensorFlow 代码问题漏洞 — tensorflow | 5.9 | Medium | 2022-02-04 |
| CVE-2022-23593 | Google Tensorflow 代码问题漏洞 — tensorflow | 5.9 | Medium | 2022-02-04 |
| CVE-2022-22180 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS | 7.5 | High | 2022-01-19 |
| CVE-2022-21676 | Engine.Io 代码问题漏洞 — engine.io | 7.5 | High | 2022-01-12 |
| CVE-2021-37862 | Mattermost 代码问题漏洞 — Mattermost | 3.7 | Low | 2021-12-17 |
| CVE-2021-43801 | Mercurius 代码问题漏洞 — mercurius | 7.5 | High | 2021-12-13 |
| CVE-2021-41135 | Cosmos-SDK 代码问题漏洞 — cosmos-sdk | 6.5 | Medium | 2021-10-20 |
| CVE-2021-31364 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS | 5.9 | Medium | 2021-10-19 |
CWE-754（对因果或异常条件的不恰当检查） 是常见的弱点类别，本平台收录该类弱点关联的 329 条 CVE 漏洞。