CWE-755 · Improper Handling of Exceptional Conditions (page 2)
Page 2 of 6 — CVEs classified under CWE-755, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39691 | Medium | 4.3 | 2024-07-05 | matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice… |
CVE-2024-34750 | High | 7.5 | 2024-07-03 | Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not… |
CVE-2024-20894 | Medium | 4.3 | 2024-07-02 | Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain c… |
CVE-2024-3150 | High | 8.8 | 2024-06-06 | In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges… |
CVE-2024-36730 | High | 7.5 | 2024-06-06 | Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zer… |
CVE-2024-3152 | High | 8.8 | 2024-06-06 | mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoints. An attacker can exploit these vulne… |
CVE-2023-46297 | Medium | 5.1 | 2024-05-29 | An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices. A WAN attacker can make the admin interface unreachable/invisible via an… |
CVE-2024-36112 | Medium | 6.3 | 2024-05-28 | Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permis… |
CVE-2022-48673 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the… |
CVE-2023-50212 | Medium | 6.5 | 2024-05-03 | D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to dis… |
CVE-2024-32652 | High | 7.5 | 2024-04-19 | The adapter @hono/node-server allows you to run your Hono application on Node.js. Prior to 1.10.1, the application hangs when receiving a Host header with a va… |
CVE-2024-26911 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corrupti… |
CVE-2024-30380 | Medium | 6.5 | 2024-04-16 | An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to c… |
CVE-2024-28869 | High | 7.5 | 2024-04-12 | Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header… |
CVE-2024-32000 | Medium | 4.3 | 2024-04-12 | matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the trunca… |
CVE-2024-30382 | High | 7.5 | 2024-04-12 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a ne… |
CVE-2024-21610 | Medium | 4.3 | 2024-04-12 | An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon (cosd) of Juniper Networks Junos OS allows an authenticated, networ… |
CVE-2024-32001 | Low | 2.2 | 2024-04-10 | SpiceDB is a graph database purpose-built for storing and evaluating access control data. Use of a relation of the form: `relation folder: folder | folder#pare… |
CVE-2024-29748 | High | 7.8 | 2024-04-05 | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2023-42509 | Medium | 6.6 | 2024-03-07 | JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in reposi… |
CVE-2024-27662 | Medium | 6.5 | 2024-02-29 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2021-46928 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access rights trap When a trap 7 (Instructio… |
CVE-2024-26584 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MA… |
CVE-2023-4537 | High | 7.4 | 2024-02-15 | Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data… |
CVE-2024-23325 | High | 7.5 | 2024-02-09 | Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that isn’t supported by the OS. Envoy is susc… |
CVE-2023-25543 | High | 7.8 | 2024-02-06 | Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially… |
CVE-2023-6267 | High | 8.6 | 2024-01-25 | A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being proc… |
CVE-2021-42146 | High | 7.5 | 2024-01-24 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two tim… |
CVE-2021-42145 | High | 7.5 | 2024-01-24 | An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of se… |
CVE-2021-42142 | Critical | 9.8 | 2024-01-23 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability… |
CVE-2021-42141 | Critical | 9.8 | 2024-01-22 | An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_He… |
CVE-2023-34348 | High | 7.5 | 2024-01-18 | AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Sub… |
CVE-2022-48619 | Medium | 5.5 | 2024-01-12 | An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capabi… |
CVE-2024-21587 | Medium | 6.5 | 2024-01-12 | An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX… |
CVE-2024-21585 | Medium | 5.9 | 2024-01-12 | An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthentic… |
CVE-2023-36842 | Medium | 6.5 | 2024-01-12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthe… |
CVE-2024-20699 | Medium | 5.5 | 2024-01-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-21907 | High | 7.5 | 2024-01-03 | Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.Dese… |
CVE-2023-50019 | Medium | 5.9 | 2024-01-02 | An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of Nudm… |
CVE-2023-52075 | High | 7.5 | 2023-12-27 | ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, R… |
CVE-2023-6866 | High | 8.8 | 2023-12-19 | TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulne… |
CVE-2023-50728 | Medium | 5.4 | 2023-12-15 | octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused… |
CVE-2023-41151 | High | 7.5 | 2023-12-14 | An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wa… |
CVE-2023-25644 | Medium | 6.5 | 2023-12-14 | There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could… |
CVE-2023-6599 | Medium | 4.3 | 2023-12-08 | Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-42578 | Medium | 6.5 | 2023-12-05 | Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access loc… |
CVE-2023-42559 | Medium | 4.9 | 2023-12-05 | Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time. |
CVE-2023-46673 | Medium | 6.5 | 2023-11-22 | It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulat… |
CVE-2023-48232 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling i… |
CVE-2023-22292 | High | 7.3 | 2023-11-14 | Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-41378 | High | 7.5 | 2023-11-06 | In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake… |
CVE-2023-5090 | Medium | 6.0 | 2023-11-06 | A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, pot… |
CVE-2023-38406 | Critical | 9.8 | 2023-11-06 | bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow." |
CVE-2023-5824 | High | 7.5 | 2023-11-03 | A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP respons… |
CVE-2023-43087 | Medium | 4.3 | 2023-11-02 | Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exp… |
CVE-2023-45820 | Medium | 5.9 | 2023-10-19 | Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can… |
CVE-2023-43251 | High | 7.8 | 2023-10-19 | XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or po… |
CVE-2023-44186 | High | 7.5 | 2023-10-11 | An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to sen… |
CVE-2023-41085 | High | 7.5 | 2023-10-10 | When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Su… |
CVE-2023-37605 | Medium | 5.5 | 2023-10-02 | Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted req… |
CVE-2023-44488 | High | 7.5 | 2023-09-30 | VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. |
CVE-2023-41332 | Low | 3.5 | 2023-09-27 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cilium's Layer 7 proxy has been disabled, c… |
CVE-2023-3280 | Medium | 5.5 | 2023-09-13 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent. |
CVE-2023-27998 | Medium | 5.3 | 2023-09-13 | A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated… |
CVE-2023-20243 | High | 8.6 | 2023-09-06 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the a… |
CVE-2023-41317 | High | 7.5 | 2023-09-05 | The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versio… |
CVE-2023-4540 | High | 7.5 | 2023-09-05 | Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to b… |
CVE-2023-31169 | Medium | 4.8 | 2023-08-31 | An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attack… |
CVE-2023-40184 | Low | 2.6 | 2023-08-30 | xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-… |
CVE-2023-23774 | High | 8.4 | 2023-08-29 | Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's seria… |
CVE-2023-39801 | Medium | 4.6 | 2023-08-24 | A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via sup… |
CVE-2023-28768 | Medium | 6.5 | 2023-08-14 | Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80… |
CVE-2023-39341 | Low | 3.3 | 2023-08-09 | "FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS)… |
CVE-2023-21409 | High | 8.4 | 2023-08-03 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the applicat… |
CVE-2023-21408 | High | 8.4 | 2023-08-03 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards… |
CVE-2023-33370 | High | 7.5 | 2023-08-03 | An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and… |
CVE-2023-38419 | Medium | 4.3 | 2023-08-02 | An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software ver… |
CVE-2023-3774 | Medium | 4.9 | 2023-07-28 | An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1… |
CVE-2023-36832 | High | 7.5 | 2023-07-14 | An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-b… |
CVE-2023-1695 | High | 7.5 | 2023-07-06 | Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-36933 | High | 7.5 | 2023-07-05 | In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an att… |
CVE-2023-20692 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privile… |
CVE-2023-24510 | High | 7.5 | 2023-06-05 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. |
CVE-2023-1732 | Medium | 5.3 | 2023-05-10 | When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare depl… |
CVE-2023-29092 | Low | 3.1 | 2023-05-09 | An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource… |
CVE-2022-27978 | High | 7.5 | 2023-04-26 | Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. |
CVE-2023-23837 | High | 7.5 | 2023-04-25 | No exception handling vulnerability which revealed sensitive or excessive information to users. |
CVE-2023-0204 | Medium | 6.5 | 2023-04-22 | NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptio… |
CVE-2021-38363 | High | 7.5 | 2023-04-20 | An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which causes an exception) remains in pendingMap (in memory) forever. De… |
CVE-2023-29520 | Medium | 4.3 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from w… |
CVE-2023-28970 | Medium | 6.5 | 2023-04-17 | An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 rou… |
CVE-2023-28842 | Medium | 6.8 | 2023-04-04 | Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream pr… |
CVE-2023-28841 | Medium | 6.8 | 2023-04-04 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream pro… |
CVE-2023-28840 | High | 7.5 | 2023-04-04 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream pro… |
CVE-2023-28631 | Medium | 5.3 | 2023-03-28 | comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing… |
CVE-2023-24308 | High | 7.8 | 2023-03-28 | A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow a… |
CVE-2022-23121 | Critical | 9.8 | 2023-03-28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln… |
CVE-2023-20993 | High | 7.8 | 2023-03-24 | In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation o… |
CVE-2023-28114 | Medium | 4.8 | 2023-03-22 | `cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when… |
CVE-2023-27595 | Medium | 6.5 | 2023-03-17 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period w… |