CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- sveltejs devalue Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection 8.7 High
- gitoxidelabs gitoxide Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File 6.8 Medium
- urwid Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS) 5.3 Medium
- gen digital avast antivirus, avast one, avast premium security, avast ultimate, avg antivirus free, avg internet security, avg ultimate, norton antivirus plus, norton 360 standard, norton 360 deluxe, norton 360 advanced +2 more Avast WFP stream parser integer underflow causes system crash No score
- gen digital avast antivirus, avast one, avast premium security, avast ultimate, avast business security, avg antivirus free, avg internet security, avg ultimate, norton antivirus plus, norton 360 standard, norton 360 deluxe, norton 360 advanced +2 more AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers No score
- undici undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay 5.9 Medium
- kyverno Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic 8.7 High
- kyverno Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic 8.7 High
- @contentful mcp-server, tsparticles +1 more tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process 8.7 High
- darylldoyle svg-sanitizer svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag 6.9 Medium
- parse-community parse-server Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update 8.2 High
- freerdp FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers 8.7 High
- @clerk fastify fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses 5.9 Medium
- @fastify/cors @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook 3.7 Low
- huawei harmonyos Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of... 4.3 Medium
- google android In multiple locations, there is a possible permission bypass due to an uncaught exception. This... 8.4 High
- google android In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an... 8.4 High
- hackerone aedes Aedes has Uncaught Exception and Uncontrolled Resource Consumption 7.5 High
- digitalbazaar forge Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message 7.5 High
- ggml-org llama.cpp llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length 8.7 High
- watchguard fireware os Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service 8.7 High
- darylldoyle svg-sanitizer svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize() 6.9 Medium
- datadog dd-trace-py Datadog dd-trace-py: IAST instrumentation can lead to application DOS 8.2 High
- eclipse foundation keypont - gose JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check) 6.9 Medium
- eclipse foundation keypont - gose LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion 6.3 Medium
- eclipse foundation keypont - gose JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix 6.9 Medium
- eclipse foundation keypont - gose AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV 6.9 Medium
- body-parser body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body 7.5 High
- expressjs multer multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown 7.5 High
- cisco telepresence video communication server (vcs) expressway Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities 7.5 High
- apache software foundation brpc Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client 7.5 High
- vllm vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate 7.1 High
- bytecodealliance wasmtime Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type 5.7 Medium
- gitea Gitea panic on the repositories route of individual users 5.3 Medium
- countly countly-server countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception 7.5 High
- nodejs undici undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor 5.9 Medium
- nodejs undici undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation 7.5 High
- nodejs undici undici vulnerable to Denial of Service via unhandled error on excessive content-encodings 7.5 High
- @libp2p webrtc, libp2p js-libp2p +1 more libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners 7.5 High
- hewlett packard enterprise hpe nonstop ansi sqlutil HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability 7.5 High
- samsung open source vyond Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. ... 4.4 Medium
- parse-community parse-server Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error 8.2 High
- ljharb qs qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string 6.3 Medium
- rabbitmq rabbitmq-server RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers 5.3 Medium
- rabbitmq rabbitmq-server RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation 5.3 Medium
- microsoft windows server 2019, windows server 2019 (server core installation), windows server 2022 +2 more +4 more Windows Failover Cluster Denial of Service Vulnerability 7.5 High
- @builder.io qwik Qwik: Crashing any Qwik Server via Resource thenable 8.7 High
- microsoft windows server 2019, windows server 2019 (server core installation), windows server 2022 +2 more +4 more Windows Failover Cluster Denial of Service Vulnerability 5.9 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 more Windows DNS Denial of Service Vulnerability 7.5 High
- fortinet fortisandbox An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0... 4.8 Medium
- Show olderLoading…