CWE-755: Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- libslirp project libslirpip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreWhile rendering the layout background, Error status check is not caught properly and also...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +48 more +50 moreWhile sending the rendered surface content to the screen, Error handling is not properly checked...5.5 Medium
- proftpd, debian linux, fedoraproject fedora +1 more +3 moreAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code...9.8 Critical
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling...7.5 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 High
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...5.7 Medium
- mitsubishi electric melsec-q series ethernet module, mitsubishielectric qj71e71-100 firmware +1 moreIn Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior,...7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- cisco nx-os, firepower extensible operating system (fxos), firepower extensible operating system +1 more +3 moreCisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software SSH Key Information Disclosure Vulnerability5.1 Medium
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +15 more +17 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...5.5 Medium
- axiosDenial of Service in axios7.5 High
- facebook thriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving...7.5 High
- facebook thriftImproper Input Validation and Excessive Iteration in Go Facebook Thrift7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of...7.5 High
- facebook thriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields...7.5 High
- facebook thriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers...7.5 High
- cisco ip phone 7800 series and 8800 series, wireless ip phone 8821 and 8821-ex, ip conference phone 7832 firmware +15 more +17 moreCisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability7.5 High
- siemens simatic cp 443-1 opc ua, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic hmi comfort outdoor panels 7" & 15" (incl. siplus variants) +37 more +39 moreA vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP...7.5 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave...6.5 Medium
- openstack neutron, redhat openstack, debian linux +2 moreOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Medium
- xmltooling project xmltooling, canonical ubuntu linux, opensuse leap +2 moreXMLTooling Library Incorrectly Handles Some Exceptions7.5 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability5.8 Medium
- live555 media server, debian linux +1 moreA Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in...9.8 Critical
- ibm datapower gateways, datapower gateway +1 moreIBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are...5.1 Medium
- verynginx project verynginxVeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...7.8 High
- foscam c1 indoor hd camera, c1 firmware +1 moreA missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera...9.8 Critical
- rockcarry ffjpegffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE...6.5 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreApache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*8.1 High
- huawei lyo-l21Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege...7.3 High
- cisco ip phone firmwareA vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP...7.5 High
- cloud foundry loggregatorCloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99...6.5 Medium
- cisco ios xrA vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated,...5.3 Medium
- philips intellivue mx40 patient worn monitor, intellivue mx40 firmware +1 moreCertain 802.11 network management messages have been determined to invoke wireless access point...6.5 Medium
- philips intellivue mx40 patient worn monitor, intellivue mx40 firmware +1 moreUnder specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40...6.5 Medium
- cisco firepower, firepower threat defense +1 moreA vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could...5.9 Medium
- cisco catalyst 4500 series switches and cisco catalyst 4500-x series switches, ios, ios xe +2 moreA vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco...8.6 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore RCE Vulnerability7.5 High
- canonical ltd. snapdIn snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces…7.5 High
- google androidIn Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a...7.5 High
- xenAn issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of...6.5 Medium
- hackerone private address check ruby gem, private address check project address check +1 moreprivate_address_check vulnerable to bypass of Resolv.getaddresses method8.1 High
- google androidA remote code execution vulnerability in the Android media framework (libhevc). Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- Show moreLoading…