CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- motorola ebts/mbts base radio, ebts mbts base radio, ebts site controller firmware +1 more +3 moreMotorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola...8.4 High
- vinitkumar json2xmljson2xml Uncaught Exception vulnerability7.5 High
- eprosima fast dds, debian linux, eprosima fast-dds +2 moreUncaught fastcdr exception (Unexpected CDR type received) crashing fastdds7.5 High
- eprosima fast dds, debian linux, eprosima fast-dds +2 moreMalformed serialized data in a data submessage leads to unhandled exception8.2 High
- hashicorp vault, vault enterprise +1 moreVault Enterprise Namespace Creation May Lead to Denial of Service4.9 Medium
- balderdashy sailsSails DoS vulnerability for apps with sockets enabled7.5 High
- huawei emui, harmonyos +1 moreVulnerability of failures to capture exceptions in the communication framework. Successful...7.5 High
- m-files serverDenial of service condition in M-Files Server7.5 High
- socket engine.ioUncaught exception in engine.io6.5 Medium
- eemeli eemeli/yaml, yaml project yaml +1 moreUncaught Exception in eemeli/yaml7.5 High
- google androidIn PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop...5.5 Medium
- xwiki, xwiki xwiki-platform +1 morePage render failure due to broken translations in xwiki-platform4.3 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8175, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797 +1 moreIn thermal, there is a possible memory corruption due to an uncaught exception. This could lead...6.7 Medium
- splunk, splunk enterprise, cloud platform +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon6.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreUncaught Exception in thorsten/phpmyfaq7.6 High
- objectcomputing openddsSpecially crafted RTPS message may cause an OpenDDS application to crash5.3 Medium
- nlnet labs krillTriggered crash on direct RRDP access7.5 High
- mercurius-js mercuriusMercurius is vulnerable to denial of service (DoS) when using subscriptions5.3 Medium
- f-secure elements endpoint protectionIn F?Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022...7.5 High
- socket engine.ioUncaught exception in engine.io7.1 High
- fastify fastify-websocket, websocket +1 morefastify-websocket vulnerable to uncaught exception via crash on malformed packet7.5 High
- keylime, fedoraproject fedora, redhat enterprise linux +2 moreKeylime: unhandled exceptions could lead to invalid attestation states5.1 Medium
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability8.6 High
- vercel next.jsUnexpected server crash in Next.js version 12.2.35.3 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.7.2 Denial of Service via Skin Geometry8.7 High
- linux kernelThere is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux...5.5 Medium
- agendaless waitressUncaught Exception (due to a data race) leads to process termination in Waitress6.5 Medium
- dicer project dicerDenial of Service (DoS)7.5 High
- siemens desigo dxr2, desigo pxc3, desigo pxc4 +5 more +7 moreA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 ...7.5 High
- bignum project bignumDenial of Service (DoS)7.5 High
- ghost sqlite3Denial of Service (DoS)7.5 High
- cisco iosCisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability7.4 High
- cisco web security appliance (wsa), asyncos +1 moreMultiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability5.3 Medium
- finn podium layout, podium-lib proxy, finn podium proxy +2 moreDenial of Service in @podium/layout and @podium/proxy7.5 High
- aveva system platformAVEVA System Platform Uncaught Exception7.5 High
- zip4j project zip4jUncaught Exception in zip4j5.5 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.0.7 Denial of Service via JSON Decoding7.1 High
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - SVG File Upload Creates DoS for Media Upload Feature4.3 Medium
- fastify fastify-staticDOS and Open Redirect with user input8.8 High
node-staticnpmDenial of Service in node-staticNo score- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 High
- akauntingAkaunting DoS via User-Controlled 'locale' Variable6.5 Medium
- nextcloud, kiteworks security-advisories +1 moreMalicious Android application can crash the Nextcloud Android Client4.1 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Windows VPN kernel driver denial of service (DoS)5.5 Medium
- owasp json-sanitizerUncaught Exception leading to Denial of Service in json-sanitizer7.5 High
- siemens simatic et 200sp open controller (incl. siplus variants), simatic s7-1500 software controller, simatic et 200sp open controller firmware +1 more +3 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) ...7.5 High
- valvesoftware game networking socketsValve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics...7.5 High
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability4.3 Medium
- kuka visual components network license server, kuka roboter gmbh visual components network license server 2.0.8 +1 moreService DoS through arbitrary pointer dereferencing on KUKA simulator8.2 High
- redhat amq onlineIt was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace...4.3 Medium
- Show moreLoading…