CWE-755: Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- zcashfoundation zebra Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures 8.7 High
- undici undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay 5.9 Medium
- apache software foundation zookeeper Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread 8.7 High
- hcl software bigfix aex HCL BigFix AEX is affected by multiple security vulnerabilities. 6.5 Medium
- nlnet labs routinator Routinator may exit on malformed ranges 7.5 High
- nlnet labs routinator Routinator HTTP server becomes unavailable with many unclosed connections 5.3 Medium
- nlnet labs routinator Routinator exits on malformed rsync URIs 7.5 High
- nlnet labs routinator Routinator stores TA certificate in cache without validation 3.8 Low
- nlnet labs routinator Routinator exits when parsing an incorrect or very large CRL file 7.5 High
- nlnet labs routinator Routinator incorrectly handles delta updates 8.2 High
- nlnet labs routinator Routinator exits when requesting the output repeatedly 6.5 Medium
- gdatasoftwareag motornet Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization 8.7 High
- gdatasoftwareag motornet Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping 8.7 High
- gdatasoftwareag motornet Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers 8.7 High
- php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 more RCE via stale global state 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 more RCE via OOM corruption 9.2 Critical
- @libp2p webrtc, libp2p js-libp2p +1 more libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners 7.5 High
- auth0 java-jwt Out-of-Range Timestamp Claim Handling in auth0/java-jwt 5.3 Medium
- corazawaf coraza OWASP Coraza WAF: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling 5.8 Medium
- apache log4net Apache log4net: Request validation failure drops the event in the aspnet-request converter 5.3 Medium
- vllm vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites) 6.5 Medium
- apache software foundation thrift Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception 8.7 High
- apache software foundation thrift Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service 8.2 High
- apache software foundation thrift Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection 8.7 High
- apache software foundation thrift Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error 8.2 High
- apache software foundation thrift Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) 8.2 High
- eclipse foundation threadx netx duo A malformed Session header permanently orphans one packet-pool block per RTSP request 8.7 High
- jpadilla pyjwt PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set 5.9 Medium
- ag-ui-protocol ag-ui ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition 5.3 Medium
- trusted domain project opendmarc Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition 6.9 Medium
- trusted domain project opendmarc Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition 6.9 Medium
- oisf suricata Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection 3.7 Low
- sveltejs devalue devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers 7.5 High
- midnightbsd mport mport verify can compare stale checksum data after hashing failures 2.0 Low
- midnightbsd mport mport index decompression can leave partial or corrupt index data after zstd failures 8.3 High
- kiteworks security-advisories Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS) 7.5 High
- kiteworks security-advisories Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS) 7.5 High
- maziggy bambuddy Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints 9.3 Critical
- belden hirschmann hios switch platform Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request 8.7 High
- huawei emui, harmonyos +1 more Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation... 6.2 Medium
- web-platform-dx baseline-browser-mapping baseline-browser-mapping process termination on invalid input causes denial of service 6.6 Medium
-
SIPSorceryNuGet SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS) 7.5 High -
SIPSorceryNuGet SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing 7.5 High - pterodactyl wings Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service 7.5 High
- sipsorcery-org sipsorcery SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS) 7.5 High
- erlang erts, otp, erlang\/otp +2 more epmd permanent DoS via EMFILE on accept(2) in erts 6.3 Medium
- open-circle valibot Valibot: record() issue paths can make flatten() throw for inherited Object property names 6.9 Medium
- red hat enterprise linux 10, enterprise linux 9, hardened images +3 more +5 more Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup 5.5 Medium
- mattiasw exifreader ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes 5.3 Medium
- coredns CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin 3.7 Low
- Show olderLoading…