CWE-248: Uncaught Exception
An exception is thrown from a function, but it is not caught.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedImproper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB ...7.5 High
- sveltejs devaluedevalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers7.5 High
- parseablehq parseableParseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware7.5 High
- patriksimek vm2vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise9.2 Critical
- pocketbasePocketbase: Unhandled panic in worker goroutines8.7 High
- @clerk fastifyfastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses5.9 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7,...7.5 High
- hbshbs vulnerable to Denial of Service via unhandled exception in async helper output escaping5.9 Medium
- rclonerclone local: crafted Range request against a translated symlink panics (DoS)5.3 Medium
- smithyhq sqladminSQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows iSCSI Target Service Denial of Service Vulnerability6.5 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUnhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service7.1 High
- nodejs undiciundici vulnerable to Denial of Service via unrequested WebSocket subprotocol7.5 High
- nodejs undiciundici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression5.9 Medium
- grpc grpc-gogRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers8.7 High
- elastic kibanaUncaught Exception in Kibana Leading to Denial of Service6.5 Medium
- ljharb qsqs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property6.3 Medium
- mongodb bi connectorMongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service8.7 High
- expressjs multermulter vulnerable to Denial of Service via crafted multipart field names7.5 High
- guno1928 alos-httpALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server7.5 High
- jowilf starlette-adminStarlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS5.4 Medium
- contribsys faktoryFaktory: Unrecovered panic in command handlers allows full-server denial of service8.7 High
libtie-hash-regex-perlDebianTie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys7.5 Highio.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash5.3 Medium- zabbixServer DoS via JavaScript preprocessing or script items2.1 Low
- elastic kibanaUncaught Exception in Kibana Cases Leading to Denial of Service4.3 Medium
- elastic kibanaUncaught Exception in Kibana Leading to Denial of Service6.5 Medium
- nodejs undiciundici vulnerable to Denial of Service via WebSocketStream unclean close5.9 Medium
- nodejs undiciundici vulnerable to response truncation via oversized chunked responses in the dump interceptor3.7 Low
SIPSorceryNuGetSIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)7.5 High- kong inc. meshKong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid5.3 Medium
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +5 more +7 more.NET Elevation of Privilege Vulnerability7.8 High
- browserslistBrowserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)7.5 High
- intel tdx moduleUncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial...6.8 Medium
- rclonerclone before v1.75.0 Denial of Service via TUS nil-response panic6.0 Medium
- lmfit astevalASTEVAL: Sandbox Escape via BaseException Subclasses5.0 Medium
- pterodactyl wingsWings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5 High
- projectcapsule capsuleCapsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests6.8 Medium
- nodejs undiciundici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives7.4 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.69.1 Denial of Service via Remote Form6.9 Medium
- delvedor find-my-wayfind-my-way is Vulnerable to DDoS with HTTP27.5 High
- @auth core, nextauthjs next-auth +1 moreNextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers7.5 High
google.golang.org/grpcGo,rootio-google.golang.org/grpcRoot +1 moregRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities8.8 High- faye websocket-driver-rubywebsocket-driver: Denial of service via malformed Host header8.9 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png7.5 High
- mattiasw exifreaderExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes5.3 Medium
- nimiq core-rs-albatrossNimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys3.7 Low
- corednsCoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin3.7 Low
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an...7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows Server Update Service (WSUS) Tampering Vulnerability7.5 High
- Show moreLoading…