CWE-755: Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset8.7 High
- matrix-org matrix-appservice-ircMalicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to4.3 Medium
- apache tomcat, netapp ontap tools +1 moreApache Tomcat: HTTP/2 excess header handling DoS7.5 High
- samsung android, samsung mobile devices +1 moreImproper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1...4.3 Medium
- oneflowImproper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of...7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anything-llm, anythingllm +2 morePrivilege Escalation in mintplex-labs/anything-llm8.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation and Local File Inclusion in mintplex-labs/anything-llm8.8 High
- mercusys mw325r eu v3An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices. A WAN attacker can make the admin interface unreachable/invisible via an unauthenticated HTTP request. Verificatio…5.1 Medium
- nautobotNautobot dynamic-group-members doesn't enforce permission restrictions on member objects6.3 Medium
- linux, linux kernel +1 morenet/smc: Fix possible access to freed memory in link clear9.8 Critical
- d-link g416, dlink g416 firmware +1 moreD-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability4.3 Medium
- hono node-server@hono/node-server contains Denial of Service risk when receiving Host header that cannot be parsed7.5 High
- linux, linux kernel +1 moredrm/buddy: Fix alloc_range() error handling code7.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV7.1 High
- traefikPossible denial of service vulnerability with Content-length header in Traefik7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck5.3 Medium
- matrix-org matrix-appservice-ircTruncated content of messages can be leaked from matrix-appservice-irc4.3 Medium
- authzed spicedbSpiceDB: LookupSubjects may return partial results if a specific kind of relation is used2.2 Low
- android pixel, google android +1 morethere is a possible way to bypass due to a logic error in the code. This could lead to local...7.8 High
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
- jfrog artifactoryJFrog Artifactory Sensitive Data Leakage in Repository configuration process6.6 Medium
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4()...6.5 Medium
- linux, linux kernel +1 moreparisc: Clear stale IIR value on instruction access rights trap5.5 Medium
- linux, linux kernel +1 morenet: tls: handle backlogging of crypto requests9.8 Critical
- comarch erp xlProtocol Downgrade in Comarch ERP XL7.4 High
- envoyproxy envoyEnvoy crashes when using an address type that isn’t supported by the OS7.5 High
- dell power manager, power manager (dpm) +1 moreDell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in...7.8 High
- quarkus, red hat build of optaplanner 8, build of quarkus 2.13.9.final +4 more +6 moreQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.8.6 High
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow...7.5 High
- contiki-ng tinydtlsAn assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through...7.5 High
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers...9.8 Critical
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could...9.8 Critical
- aveva pi serverImproper Check or Handling of Exceptional Conditions in Aveva PI Server7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd will hang on receiving a specific DHCP packet6.5 Medium
- linux kernelAn issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker...5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Hyper-V Denial of Service Vulnerability5.5 Medium
- open5gsAn issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a...5.9 Medium
- revanced, revanced revanced-api +1 moreReVanced API vulnerable to Denial of Service due to lack of error caching7.5 High
- mozilla firefoxTypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in...8.8 High
- octokit app, octokit, octokit webhooks +2 more +4 moreUnauthenticated Denial of Service in the octokit/webhooks library5.4 Medium
- zte mc801a, mc801a1, mc801a1 firmware +1 more +3 moreDenial of Service Vulnerability in Some ZTE Mobile Internet Products6.5 Medium
- softing opc, opc ua c\+\+ software development kit, secure integration server +2 moreAn uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows...7.5 High
- microweber, microweber microweber/microweber +1 moreMissing Standardized Error Handling Mechanism in microweber/microweber3.1 Low
- samsung mobile data store, samsung cloud +1 moreImproper handling of insufficient permissions or privileges vulnerability in Samsung Data Store...6.5 Medium
- samsung android, samsung mobile devices +1 moreImproper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows...4.9 Medium
- elastic elasticsearchElasticsearch Improper Handling of Exceptional Conditions6.5 Medium
- Show moreLoading…