CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- m2team nanazipNanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size2.4 Low
- excelizeExcelize: Negative shared-string index causes panic in GetCellValue and GetRows6.9 Medium
- libp2p rust-libp2plibp2p-quic: Remote panic via certificate expiry race during QUIC handshake8.2 High
- linuxfoundation nats-serverNATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled6.8 Medium
- open-telemetry opentelemetry-jsOpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header7.5 High
- erweixin ratexratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)8.7 High
- gallagher command centre, controller 7000 and 6000 +1 moreUncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface...2.7 Low
- gallagher command centre, t-20 readers +1 moreUncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator...2.7 Low
- webpack-dev-serverwebpack-dev-server vulnerable to denial of service via a malformed Host or Origin header5.3 Medium
- zcashfoundation zebra, zebra-state +1 moreZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection5.9 Medium
- zcashfoundation zebra, zebra-state +1 moreZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks6.9 Medium
- zcashfoundation zebraZebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC7.1 High
- zcashfoundation zebra, zebra-rpc +1 moreZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate6.5 Medium
- surrealdbSurrealDB before 3.1.0 Denial of Service via malformed RPC use8.7 High
- pion dtlsPion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message6.3 Medium
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths7.5 High
- mastodonMastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER7.5 High
- corewcfCoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.6.5 Medium
ts-deepmergenpmts-deepmerge: Prototype Method Override leads to DoS6.9 Medium- denoDeno: Denial of service via non-ASCII bytes in WebSocket response headers4.3 Medium
postgres-protocolcrates.iopostgres-protocol: Panic decoding a malformed `hstore` value allows denial of service6.9 Medium- grpc grpc-node@grpc/grps-js: A malformed request can cause a server crash7.5 High
- grpc grpc-node@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash7.5 High
- hapijs joijoi: Uncaught RangeError on deeply nested input through recursive `link()` schemas5.3 Medium
- halfgaar flashmqFlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older6.5 Medium
- suprema biostar 2 (server)Uncaught exception vulnerability in Suprema's BioStar8.7 High
- pmqs io::uncompress::unzip, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date5.5 Medium
- riebl vanetzaVanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verification7.5 High
- riebl vanetzaVanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing7.5 High
- nimiq core-rs-albatrossnimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item7.5 High
- zauberzeug niceguiNiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes5.3 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent5.5 Medium
- multipartymultiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception7.5 High
- owasp modsecurityModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators8.2 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)8.6 High
- kanidmKanidm: Unauthenticated process abort via SCIM filter stack exhaustion8.7 High
- emmett-framework granianGranian: DoS via WSGI response header panic5.9 Medium
- emmett-framework granianGranian: Unauthenticated DoS via WebSocket subprotocol header panic7.5 High
- gitoxidelabs gitoxidegitoxide before 0.69.0 Denial of Service via gix-pack8.7 High
- No product listedAn issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a...7.5 High
- aligungr ueransimaligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception6.9 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability5.5 Medium
- uutils coreutilsuutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing5.5 Medium
- zcashfoundation zebra, zfnd zebra-rpc, zebrad +2 moreZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients6.9 Medium
- bytecodealliance wasmtimeWasmtime's host panics when Winch compiler executes `table.fill`5.9 Medium
- bytecodealliance wasmtimeWasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-644.1 Medium
- bytecodealliance wasmtimeWasmtime panics when lifting `flags` component value5.6 Medium
- aws sdk for go v2Denial of service in the event stream header decoder in AWS SDK for Go v28.2 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server...7.5 High
- Show moreLoading…