173 vulnerabilities classified as CWE-755 (对异常条件的处理不恰当). AI Chinese analysis included.
CWE-755 represents a critical software weakness where applications fail to properly manage unexpected or exceptional runtime conditions, such as network timeouts, resource exhaustion, or invalid input states. This flaw typically allows attackers to exploit the lack of robust error handling by triggering specific exceptions that cause the system to crash, leak sensitive internal stack traces, or enter an unstable state. By carefully crafting inputs that induce these exceptional conditions, adversaries can achieve denial of service or potentially escalate privileges if the application behaves unpredictably during failure recovery. To mitigate this risk, developers must implement comprehensive exception handling mechanisms that validate inputs, ensure graceful degradation, and log errors securely without exposing internal details. Utilizing defensive programming practices and rigorous testing ensures that the software remains stable and secure even when encountering unforeseen operational anomalies.
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { //We do nothing so we just ignore the error. }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { printf("Malloc failed to allocate memory resources"); return -1; }| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-0259 | Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario — Junos OS | 7.4 | High | 2021-04-22 |
| CVE-2021-23886 | Local Denial of Service in McAfee DLP Endpoint for Windows — McAfee Data Loss Prevention (DLP) Endpoint for Windows | 5.5 | Medium | 2021-04-15 |
| CVE-2020-25236 | Siemens LOGO! 8 BM 安全漏洞 — LOGO! 12/24RCE | 5.5 | Medium | 2021-03-15 |
| CVE-2020-2020 | Cortex XDR Agent: Exceptional condition denial-of-service (DoS) — Cortex XDR Agent | 5.5 | Medium | 2020-12-09 |
| CVE-2020-7926 | Specific query can cause a DoS against MongoDB Server — MongoDB Server | 6.5 | Medium | 2020-11-23 |
| CVE-2020-1681 | Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service — Junos OS Evolved | 6.5 | Medium | 2020-10-16 |
| CVE-2020-5387 | Dell XPS 13 9370 安全漏洞 — CPG BIOS | 2.3 | Low | 2020-10-01 |
| CVE-2020-15223 | Ignored storage errors on token revokation in ORY Fosite — fosite | 8.0 | High | 2020-09-24 |
| CVE-2020-7923 | Specific GeoQuery can cause DoS against MongoDB Server — MongoDB Server | 6.5 | Medium | 2020-08-21 |
| CVE-2020-15701 | Unhandled exception in apport — apport | 5.5 | Medium | 2020-08-06 |
| CVE-2020-1643 | Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured — Junos OS | 5.5 | Medium | 2020-07-17 |
| CVE-2020-15117 | Denial of Service in Synergy — synergy-core | 6.5 | Medium | 2020-07-15 |
| CVE-2020-1744 | Red Hat Keycloak 信息泄露漏洞 — keycloak | 5.6 | Medium | 2020-03-24 |
| CVE-2019-10222 | Red Hat Ceph 资源管理错误漏洞 — ceph | 7.5 | - | 2019-11-08 |
| CVE-2019-6848 | Schneider Electric 多款产品输入验证错误漏洞 — Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info) | 8.6 | - | 2019-10-29 |
| CVE-2019-6847 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6844 | 多款Schneider产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6843 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6842 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6841 | 多款Schneider产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-0051 | SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature. — Junos OS | 6.5 | Medium | 2019-10-09 |
| CVE-2019-8462 | Check Point R80.30 Security Gateway 安全漏洞 — Check Point Security Gateway | 7.5 | - | 2019-10-02 |
| CVE-2017-9658 | Philips IntelliVue MX40 Patient Worn Monitor 安全漏洞 — IntelliVue MX40 Patient Worn Monitor | 6.5 | - | 2018-04-30 |
Vulnerabilities classified as CWE-755 (对异常条件的处理不恰当) represent 173 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.