CWE-755: Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- excelizeExcelize: Negative shared-string index causes panic in GetCellValue and GetRows6.9 Medium
- lepture mistuneMistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files5.3 Medium
- imagemagickImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder5.9 Medium
- corewcfCoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.6.5 Medium
- kerberosmansour hulumiHulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts8.4 High
- nimiq core-rs-albatrossNimiq network-libp2p: Untrusted peer can wedge DHT5.3 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability8.8 High
- No product listedAn issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large...6.2 Medium
- nlnet labs routinatorRoutinator crashes on specifically crafted RRDP XML files8.7 High
- nlnet labs routinatorRoutinator exits when accepting an incoming HTTP or RTR connection fails8.7 High
- rurban cpanel::json::xs, cpanel\ +1 moreCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws7.5 High
- jpadilla pyjwtPyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)3.7 Low
- pmqs io::compressIO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID7.3 High
- multipartymultiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing7.5 High
- open-telemetry opentelemetry-js, @opentelemetry auto-instrumentations-node, exporter-prometheus +4 more +6 moreopentelemetry-js: Prometheus exporter process crash via malformed HTTP request7.5 High
- free5gcfree5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)7.5 High
- free5gcfree5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)7.5 High
- lin-snow ech0Ech0 before 4.7.3 Access Token Revocation Bypass9.1 Critical
rpasswordcrates.iorpassword affected by partial password reveal when input is interrupted3.8 Low- emmett-framework granianGranian: DoS via WSGI response header panic5.9 Medium
- nimiq nimiq-primitives, proof-of-stake +1 morenimiq-primitives: Node crash due to missing interlink validation in election macro block proposals7.5 High
- uutils coreutilsuutils coreutils chmod False Success Exit Code in Recursive Mode5.5 Medium
- microsoft .net framework, .net framework 3.5, .net framework 3.5 and 4.7.2 +8 more +10 more.NET Framework Denial of Service Vulnerability7.5 High
- emilstenstrom justhtmljusthtml before 1.15.0 Multiple Security Issues9.3 Critical
- svelte kitSvelteKit's invalidated redirect in handle hook causes Denial-of-Service6.3 Medium
- rustdesk, rustdesk-client rustdesk client +1 moreRustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload8.2 High
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the system service framework. Impact: Successful exploitation...7.3 High
- psd-toolspsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps6.8 Medium
- caddyserver caddyCaddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed8.8 High
- bytecodealliance wasmtimeWasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future6.9 Medium
- cube-js cube, cube cube.js +1 moreCube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request6.5 Medium
- vb-audio software matrix, matrix coconut, voicemeeter banana +2 more +4 moreVB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart7.1 High
- rustfsRustFS gRPC GetMetrics deserialization panic enables remote DoS5.5 Medium
- emiago sipgoSIPGO library has response DoS vulnerability via nil pointer dereference8.7 High
- matrix matrix-rust-sdkmatrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values1.3 Low
- vilar vs-ipc1002, vimicro vs-ipc1002 firmware +1 moreDoS vulnerability in Vilar VS-IPC1002 IP cameras7.1 High
- rockwell automation armorstart aopRockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability8.7 High
- quic-goquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes7.1 High
- mmaitre314 picklescanPickleScan Security Bypass via Bad CRC in ZIP Archive9.3 Critical
- rockwell automation 1756-ent2r, 1756-en4tr, 1756-en4trxt, rockwellautomation 1756-en2tr series a firmware, 1756-en2tr series b firmware +3 more +5 moreRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability7.1 High
- plone voltoVolto affected by possible DoS by invoking specific URL by anonymous user7.5 High
- huawei harmonyosVulnerability of improper processing of abnormal conditions in huge page separation. Impact:...8.0 High
- bytecodealliance wasmtimeWasmtime vulnerable to segfault when using component resources2.1 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash7.1 High
- xenx86: Incorrect stubs exception handling for flags recovery4.3 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +71 more +73 moreA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All...6.9 Medium
- Show moreLoading…