CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- go-jose, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift +110 more +112 moreGo JOSE affect by a panic in JWE decryption7.5 High
- harakaHaraka affected by DoS via `__proto__` email header8.7 High
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +10 more +12 moreHandlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation7.5 High
- free5gc, free5gc udm +1 morefree5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error8.7 High
- b3log siyuanSiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass7.5 High
- parse-community parse-serverParse Server: LiveQuery subscription with invalid regular expression crashes server5.9 Medium
- protocol yamux, libp2p rust-yamux +1 moreYamux remote Panic via malformed Data frame with SYN set and len = 2621458.7 High
- danny-avila librechatLibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos6.5 Medium
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +19 more +21 moreundici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation7.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +18 more +20 moreundici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client7.5 High
- yhirose cpp-httplibcpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header7.5 High
- quinn-rs quinn, red hat confidential compute attestation, logging subsystem for red hat openshift +13 more +15 moreQuinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing8.7 High
- python-markdown markdown, red hat external secrets operator for red hat openshift, multicluster engine for kubernetes +27 more +29 morePython-Markdown has an Uncaught Exception7.5 High
- cisco snort, cyber vision, secure firewall threat defense (ftd) software +3 more +5 moreMultiple Cisco Products Snort 3 TBD Denial of Service Vulnerability5.8 Medium
- cisco secure endpointClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability5.3 Medium
- exiv2Exiv2: Uncaught exception - cannot create std::vector larger than max_size()2.7 Low
- go-vikunja vikunjaVikunja has Path Traversal in CLI Restore7.2 High
- aveva pi data archive pi serverUncaught Exception vulnerability in AVEVA PI Data Archive8.7 High
- intel ethernet controllerUncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before...6.0 Medium
- emmett-framework coreEmmett has an Unhandled CookieError Exception Causing Denial of Service7.5 High
- axis camera station proA server-side injection was possible for a malicious admin to manipulate the application to...4.5 Medium
github.com/authzed/spicedbGoLookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic1.3 Low- actix actix-filesactix-files before 0.6.10 Denial of Service via empty Range header6.9 Medium
- naturalintelligence fast-xml-parserfast-xml-parser has RangeError DoS Numeric Entities Bug7.5 High
- nodejs node, node.js +1 moreWe have identified a bug in Node.js error handling where "Maximum call stack size exceeded"...5.9 Medium
- nodejs node, node.js, red hat enterprise linux 10 +6 more +8 moreA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...7.5 High
- svelte adapter-node, kit +1 moreSvelteKit Denial of service and possible SSRF when using prerendering8.4 High
- robrichards xmlseclibsrobrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation6.0 Medium
- getgrav gravGrav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter6.9 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...4.9 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to an incorrect bounds check. This could lead to...5.3 Medium
- mediatek nr15, nr16, mediatek, inc. mt2735, mt2737, mt6833, mt6833p, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6875, mt6875t, mt6877, mt6877t, mt6877tt, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6895tt, mt6896, mt6980, mt6980d, mt6983, mt6983t, mt6985, mt6985t, mt6989, mt6989t, mt6990, mt8675, mt8771, mt8791, mt8791t, mt8797 +2 moreIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...5.3 Medium
- automated logic gen5 controllers, webctrl, carrier i-vu +2 moreALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range8.8 High
- arista networks eosOn affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.5.6 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreDenial of Service - Protocol Manipulation10.0 Critical
- sick tloc100-100 firmware, sick ag tloc100-100 all firmware versions +1 moreDenial-of-service (DoS) via delayed or missing client response6.5 Medium
- gallagher command centre serverUncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged...5.5 Medium
- alloy-rs coreAlloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing7.5 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft Office Denial of Service Vulnerability5.5 Medium
- rockwell automation compact guardlogix® 5370Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability8.7 High
- argoproj argo cd, argo-cd +1 moreArgo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook7.5 High
- linuxfoundation pytorchA Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is...7.5 High
- linuxfoundation pytorchA syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a...7.5 High
- cisa thoriumCISA Thorium account verification email error handling6.9 Medium
- typo3, typo3 cms +1 moreDenial of Service in TYPO3 Bookmark Toolbar5.1 Medium
- konica minolta, inc. multiple products in bizhub seriesUncaught exception issue exists in Multiple products in bizhub series. If a malformed file is...5.3 Medium
- part-db project part-db, part-db part-db-server +1 morePart-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload5.7 Medium
- sysax software multi-server, sysax multi server +1 moreSysax Multi-Server <= 6.10 SSHD Key Exchange DoS8.7 High
- kyvernoKyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service7.7 High
- haxtheweb issues, psu haxcms-nodejs +1 moreHAX CMS NodeJs's Improper Error Handling Leads to Denial of Service7.1 High
- Show moreLoading…