CWE-703: Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
From the CWE List. © The MITRE Corporation.
Newest
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash7.1 High
- luomusha node-twainnode-twain vulnerable to Improper Check or Handling of Exceptional Conditions8.3 High
- ibm security verify accessIBM Security Verify Access denial of service5.3 Medium
- hanwha vision co., ltd. a-series, q-series, pnm-series camera, hanwhavision ane-l6012r, ane-l6012r firmware +226 more +228 moreUnauthenticated DoS8.7 High
- nvidia cloud gaming, gpu display driver, vgpu software, and cloud gaming, gpu display driver +1 more +3 moreCVE5.5 Medium
- apple ios, ipados, macos +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS...7.8 High
- apppresser, scottopolis apppresser – mobile app framework +1 moreAppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass8.1 High
- intel power gadget, power gadget software +1 moreImproper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an...3.8 Low
- fortinet fortiosAn improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet...5.0 Medium
- ivanti connect secure, policy secure +1 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash7.1 High
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti...8.2 High
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti...8.2 High
- ivanti connect secure, policy secure +1 moreA null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x)...7.5 High
- ivanti connect secure, policy secure +1 moreAn XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22...5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses6.4 Medium
- jedsoft s-langS-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().9.1 Critical
- linux kernelprinter_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does...5.5 Medium
- aveva pi serverImproper Check or Handling of Exceptional Conditions in Aveva PI Server7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd will hang on receiving a specific DHCP packet6.5 Medium
- evm project evmErroneous handling of `record_external_operation` error return5.9 Medium
- freeswitchFreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation7.5 High
- bosch onvif camera event driver tool, bis video engine, video management system +21 more +23 moreAn improper handling of a malformed API answer packets to API clients in Bosch BT software...5.9 Medium
- bosch monitor wall, monitorwall, video recording manager +5 more +7 moreAn improper handling of a malformed API request to an API server in Bosch BT software products...7.5 High
- asterisk, sangoma certified asterisk +1 moreAsterisk susceptible to Denial of Service via DTLS Hello packets during call initiation7.5 High
- calico typha, tigera calico, calico enterprise +2 more +4 moreCalico Typha hangs during unclean TLS handshake7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreKernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs6.0 Medium
- apollographql apollo router, router, apollo helms-charts router +2 moreImproper Check or Handling of Exceptional Conditions in apollo-router7.5 High
- zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, ca…7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN6.5 Medium
- nettyNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state6.5 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +23 more +25 moreNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 High
- ziparchive project ziparchiveAn unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to...5.5 Medium
- motorola ebts/mbts base radio, ebts mbts base radio, ebts site controller firmware +1 more +3 moreMotorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola...8.4 High
- hashicorp vault, vault enterprise +1 moreVault Enterprise Namespace Creation May Lead to Denial of Service4.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied7.5 High
- linuxfoundation vitessVitess VTAdmin users that can create shards can deny access to other functions4.1 Medium
- nvidia connectx firmwareNVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware,...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: JRR200: Kernel crash upon receipt of a specific packet6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: Failure of storm control feature may lead to Denial of Service6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets6.5 Medium
- palo alto networks pan-os, fedoraproject fedora, palo alto networks cloud ngfw +1 more +3 morePAN-OS: Local File Deletion Vulnerability6.5 Medium
- linuxfoundation vitessvitess allows users to create keyspaces that can deny access to already existing keyspaces4.1 Medium
- google androidIn BitmapExport.java, there is a possible failure to truncate images due to a logic error in the...5.5 Medium
- google androidIn updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable...5.5 Medium
- zephyrproject zephyrDOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer9.6 Critical
- zephyrproject zephyrDoS: Invalid Initialization in le_read_buffer_size_complete9.6 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets7.5 High
- Show moreLoading…