CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- rustls project rustls, red hat trusted artifact signer +1 moreRustls: rustls network-reachable panic in `acceptor::accept`5.3 Medium
- No product listedUncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an...6.8 Medium
- element-hq element-webElement allows a malicious homeserver can modify events leading to unrenderable events or rooms5.0 Medium
- huawei harmonyosVulnerability of message types not being verified in the advanced messaging modul Impact:...5.3 Medium
- surrealdbSurrealDB before 2.0.4 Denial of Service via Parser Exception7.1 High
- typo3Denial of Service in TYPO3 Bookmark Toolbar4.9 Medium
- intel raid web consoleUncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated...6.5 Medium
- ecma international ecma262JavaScript specification issue may lead to type confusion and pointer dereference in implementations8.6 High
- boaBoa has an uncaught exception when transitioning the state of `AsyncGenerator` objects7.5 High
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of...9.3 Critical
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted phonenumber inputs8.6 High
- datadog dd-trace-cppdd-trace-cpp malformed unicode header values may cause crash7.5 High
- golang image, golang.org/x/image golang.org/x/image/tiff +1 morePanic when parsing invalid palette-color images in golang.org/x/image7.5 High
- hanwha vision co., ltd. a-series, q-series, pnm-series camera, hanwhavision ane-l6012r, ane-l6012r firmware +226 more +228 moreUnauthenticated DoS8.7 High
- strapi@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling5.3 Medium
- envoyproxy envoyEnvoy can crash due to uncaught nlohmann JSON exception7.5 High
- ibm app connect enterpriseIBM App Connect Enterprise denial of service6.5 Medium
- huawei emui, harmonyos +1 moreDenial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this...6.2 Medium
- silabs.com z/ip gateway sdkZ/IP Gateway S2 Nonce Get Denial of Service Vulnerability7.5 High
- silabs z\/ip gateway sdk, silabs.com z/ip gateway sdk +1 moreZ/IP Gateway Device Reset Locally Denial of Service Vulnerability7.5 High
- google android, unisoc s8000 firmware, t760 firmware +3 more +5 moreIn modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling....7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...4.4 Medium
- google android, mediatek mt2713, mt6781 +19 more +21 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...6.2 Medium
- elastic elasticsearchElasticsearch Uncaught Exception4.3 Medium
- cisco iosA vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an...7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verification5.0 Medium
- intel ethernet adapter, ethernet controller i225 manageability firmware, ethernet adapter complete driver +3 more +5 moreUncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local a…7.2 High
- silabs.com pc controller, silabs z-wave pc-based controller +1 moreSilicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability6.5 Medium
- silabs.com pc controller, silabs z-wave pc-based controller +1 moreSilicon Labs PC Controller Denial of Service Vulnerability6.5 Medium
- surrealdbSurrealDB before 1.2.0 Denial of Service via Nonexistent Function7.1 High
- surrealdbSurrealDB before 1.2.1 Denial of Service via Parsing Error7.1 High
- netapp storagegridDenial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)6.5 Medium
- intel killer, proset\/wireless +1 moreUncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software...4.3 Medium
- envoyproxy envoyEnvoy crashes when using an address type that isn’t supported by the OS7.5 High
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet7.5 High
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreDenial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)6.5 Medium
- mozilla firefoxSome WASM source files could have caused a crash when loaded in devtools. This vulnerability...6.5 Medium
- surrealdbSurrealDB before 1.1.0 Denial of Service via HTTP Headers8.7 High
- surrealdbSurrealDB before 1.1.1 Denial of Service via Global Parameters7.1 High
- silabs.com gecko sdk, silabs z-wave software development kit +1 moreZ-Wave Denial of Service caused by Stream of Packets5.7 Medium
- intel unison softwareUncaught exception for some Intel Unison software may allow an authenticated user to potentially...6.5 Medium
- intel unison softwareUncaught exception for some Intel Unison software may allow an authenticated user to potentially...7.3 High
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the NFC module. Successful exploitation of this...7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and...8.6 High
- quic-goquic-go vulnerable to pointer dereference that can lead to panic7.5 High
- stellar rs-stellar-strkeyPanic in SignedPayload::from_payload5.3 Medium
- nvidia cumulus linuxNVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an...6.5 Medium
- whisperfish blurhash-rsblurhash panics on parsing crafted inputs8.6 High
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted RF3966 inputs8.6 High
- google grpcDenial of Service in gRPC Core7.5 High
- Show moreLoading…