CWE-703: Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
From the CWE List. © The MITRE Corporation.
Newest
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 High
github.com/cometbft/cometbftGoCometBFT has inconsistencies between how commit signatures are verified and how block time is derived7.1 High- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate exception handling leads to denial of service6.5 Medium
- rustcrypto rsarsa crate has potential panic on a prime being equal to 12.7 Low
- color iccdeviccDEV has Type Confusion during XML Curve Serialization6.6 Medium
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 moreNodemailer: nodemailer: denial of service via crafted email address header7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- zephyrproject-rtos zephyrBluetooth: peripheral: Invalid handling of malformed connection request6.5 Medium
- kubevirtKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation5.3 Medium
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed through improved state management. This issue is fixed in Safari 26.1,...4.3 Medium
- apple ipados, macos, safari +4 more +6 moreThis issue was addressed through improved state management. This issue is fixed in iOS 26.1 and...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed through improved state management. This issue is fixed in Safari 26.1,...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP HSB vulnerability8.2 High
- siderolabs omniOmni is Vulnerable to DoS via Empty Create/Update Resource Requests5.3 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information3.5 Low
- ywxbear php basic bookstore website, php-bookstore-website-example +1 moreywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input6.9 Medium
- apple macosA logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An...5.5 Medium
- bigbluebuttonBigBlueButton vulnerable to Chat DoS via invalid reactionEmojiId7.5 High
- bigbluebuttonBigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutation7.5 High
- argoproj argo cd, argo-cd +1 moreArgo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook7.5 High
- argoproj argo cd, argo-cd +1 moreUnauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload7.5 High
- datahihi1 tinyenv, tiny-env +1 moreTinyEnv: Missing .env file not required — may cause unexpected behavior5.1 Medium
- google androidIn Permission Manager, there is a possible way for the microphone privacy indicator to remain...3.3 Low
- apple macos, safari +1 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6....6.5 Medium
- apple macos, safari +1 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A...6.2 Medium
- haxtheweb issues, psu haxcms-nodejs +1 moreHAX CMS NodeJs's Improper Error Handling Leads to Denial of Service7.1 High
- google androidIn multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server...5.5 Medium
- snowplow snowbridgeAn issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It...7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash due to improper validation of explain command6.5 Medium
- google androidIn multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic...4.0 Medium
ntpdcrates.iontpd NTS client denial of service via wrongly sized cookies5.3 Medium- cometbftMalicious peer can make node stuck in blocksync in github.com/cometbft/cometbft7.1 High
- No product listedThe XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a...7.5 High
@lodestar/reqrespnpmLodestar snappy decompression issueNo score- vyperlang vyperSuccess of Certain Precompile Calls not Checked in Vyper2.3 Low
- notaryproject notation-goProcess crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go3.3 Low
- oring iap-420, oringnet iap-420 firmware +1 moreDenial of Service6.9 Medium
- cleantalk antispam, spam protection, honeypot, anti-spam by cleantalk, spam protection\, antispam\, firewall +2 moreSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation8.1 High
- tophive ultimate aiUltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check5.6 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...2.1 Low
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...5.9 Medium
- google android, linuxfoundation yocto, mediatek mt6835 +13 more +15 moreIn wlan, there is a possible denial of service due to incorrect error handling. This could lead...7.5 High
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Improper Check or Handling of Exceptional Conditions9.4 Critical
- dell cloudlinkCloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional...6.6 Medium
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 moreA vulnerability has been found in Dahua products. After obtaining the administrator's username...4.9 Medium
- unitronics vision plc, visilogic +1 moreUnitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions6.5 Medium
- Show moreLoading…