CWE-755: Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelIn the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the...5.5 Medium
- fortinet fortiosImproper permission or value checking in the CLI console may allow a non-privileged user to...5.5 Medium
- microsoft windows server, windows 10, windows server 2019 +1 more +3 moreMicrosoft Windows RDP can bypass the Windows lock screen5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...3.7 Low
- google androidIn generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image...5.5 Medium
- gitlabGitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were...7.5 High
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...7.5 High
- sqlite, apache bookkeeper, netapp cloud backup +5 more +7 moreSQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...5.3 Medium
- apple iphone, iphone 3gs +1 moreApple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate...6.1 Medium
- horms perdition, debian linux +1 morePerdition before 2.2 may have weak security when handling outbound connections, caused by an...5.9 Medium
- espressif esp32-d0wd firmware, esp32-d2wd firmware, esp32-pico-d4 firmware +1 more +3 moreAn issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti...4.6 Medium
- intel ethernet 700 series software, ethernet controller 710-bm1 firmware, ethernet controller x710-at2 firmware +4 more +6 moreUnhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0...6.5 Medium
- intel ethernet 700 series software, ethernet controller 710-bm1 firmware, ethernet controller x710-at2 firmware +4 more +6 moreUnhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions...5.5 Medium
- intel baseboard management controller firmwareUnhandled exception in Intel(R) Baseboard Management Controller firmware may allow an...7.5 High
- pediapress mwlibmwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic...7.5 High
- google blink, chrome +1 moreAn issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in...6.5 Medium
- google blink, chrome +1 moreIncorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.6.5 Medium
- wpwham currency switcher for woocommerceAn issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user...6.5 Medium
- burn project burn, debian linux +1 moreburn allows file names to escape via mishandled quotation marks9.8 Critical
- schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...8.6 High
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- apache hadoop, connect2id nimbus jose\+jwt, oracle communications cloud native core security edge protection proxy +12 more +14 moreImproper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT9.8 Critical
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...8.8 High
- microsoft sql server management studioAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...6.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly...7.8 High
- microsoft sql server management studioAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packets7.5 High
- juniper junos, juniper networks junos os +1 moreSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.6.5 Medium
- [unknown] python-ecdsaDuplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA3.7 Low
- espressif esp-idfAn issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x...6.8 Medium
- nlnetlabs unbound, canonical ubuntu linux +1 moreUnbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a...7.5 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability7.7 High
- check point security gatewayIn a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point...7.5 High
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software...8.8 High
- z.cash zcashZcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a...5.3 Medium
- advantech webaccess\/hmi designerAdvantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at...7.5 High
- google chromeInsufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed...6.5 Medium
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90)...7.5 High
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2...7.5 High
- schneider electric modicon m340, schneider electric se modicon m580, schneider-electric modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2...7.5 High
- schneider electric se modicon m580, schneider-electric modicon m580 firmware +1 moreA CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80,...5.9 Medium
- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 moreAn issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the...7.5 High
- eclipse paho java client, the eclipse foundation eclipse paho +1 moreImproper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library7.5 High
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in the Ceph RGW configuration with Beast as the front end handling client...7.5 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...7.5 High
- matrixsslIn MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages...9.8 Critical
- Show moreLoading…