CWE-755 · Improper Handling of Exceptional Conditions (page 5)
Page 5 of 6 — CVEs classified under CWE-755, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-29561 | Medium | 5.5 | 2020-12-04 | An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but s… |
CVE-2020-28896 | Medium | 5.3 | 2020-11-23 | Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The c… |
CVE-2020-7926 | Medium | 6.5 | 2020-11-23 | A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server select… |
CVE-2020-8767 | Medium | 5.5 | 2020-11-12 | Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of… |
CVE-2020-0443 | Medium | 5.5 | 2020-11-10 | In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory… |
CVE-2020-27121 | Medium | 4.3 | 2020-11-06 | A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker… |
CVE-2020-16005 | High | 8.8 | 2020-11-03 | Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2020-16895 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploit… |
CVE-2020-1681 | Medium | 6.5 | 2020-10-16 | Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp p… |
CVE-2020-0421 | High | 7.8 | 2020-10-14 | In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with… |
CVE-2020-4388 | High | 8.2 | 2020-10-12 | IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug informatio… |
CVE-2020-5387 | Low | 2.3 | 2020-10-01 | Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this… |
CVE-2020-26160 | High | 7.5 | 2020-09-30 | jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specif… |
CVE-2020-15223 | High | 8.0 | 2020-09-24 | In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.34.0, the `TokenRevocationHandler` ignores errors coming from the… |
CVE-2020-25602 | Medium | 6.0 | 2020-09-23 | An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses… |
CVE-2020-25597 | Medium | 6.5 | 2020-09-23 | An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handlin… |
CVE-2020-0318 | Medium | 5.5 | 2020-09-18 | In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execut… |
CVE-2020-24753 | Critical | 9.8 | 2020-09-17 | A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted… |
CVE-2020-0382 | Low | 2.3 | 2020-09-17 | In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug r… |
CVE-2020-14304 | Medium | 4.4 | 2020-09-15 | A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user… |
CVE-2020-2075 | High | 7.5 | 2020-08-31 | Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV… |
CVE-2020-13467 | Medium | 4.6 | 2020-08-31 | The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug int… |
CVE-2020-13463 | Medium | 4.6 | 2020-08-31 | The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and except… |
CVE-2020-3338 | High | 7.5 | 2020-08-27 | A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote att… |
CVE-2020-13410 | High | 7.5 | 2020-08-26 | An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream. |
CVE-2020-7923 | Medium | 6.5 | 2020-08-21 | A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsyst… |
CVE-2020-0512 | Medium | 5.5 | 2020-08-13 | Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable d… |
CVE-2020-17361 | Medium | 5.5 | 2020-08-12 | An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (i… |
CVE-2020-0247 | Medium | 5.5 | 2020-08-11 | In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service… |
CVE-2020-0108 | High | 7.8 | 2020-08-11 | In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local… |
CVE-2020-15701 | Medium | 5.5 | 2020-08-06 | An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a st… |
CVE-2020-10604 | High | 7.5 | 2020-07-25 | In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted reques… |
CVE-2020-1643 | Medium | 5.5 | 2020-07-17 | Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routi… |
CVE-2020-15117 | Medium | 6.5 | 2020-07-15 | In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295)… |
CVE-2020-7693 | Medium | 5.3 | 2020-07-09 | Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.2… |
CVE-2020-9074 | Medium | 5.3 | 2020-06-05 | Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an except… |
CVE-2020-1071 | Medium | 6.8 | 2020-05-21 | An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog, aka 'Windows Remote Access Common Di… |
CVE-2020-12888 | Medium | 5.3 | 2020-05-15 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. |
CVE-2020-11012 | Critical | 9.3 | 2020-04-23 | MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to per… |
CVE-2020-12105 | Medium | 5.9 | 2020-04-23 | OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attack… |
CVE-2020-11875 | High | 7.8 | 2020-04-17 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK kernel does not properly implement except… |
CVE-2019-14122 | High | 7.8 | 2020-04-16 | Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Aut… |
CVE-2020-1632 | High | 8.6 | 2020-04-15 | In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP… |
CVE-2020-2757 | Low | 3.7 | 2020-04-15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8… |
CVE-2020-2756 | Low | 3.7 | 2020-04-15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8… |
CVE-2020-11743 | Medium | 5.5 | 2020-04-14 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant ta… |
CVE-2020-1639 | High | 7.5 | 2020-04-08 | When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improperly handl… |
CVE-2018-21088 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can cause a reboot because InputMethodManagerService has an unprotected sys… |
CVE-2018-21091 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handling. The Samsung ID i… |
CVE-2017-18682 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Because of incorrect exception handling and an unprote… |
CVE-2017-18678 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. An attacker can crash system processes via a Serializa… |
CVE-2017-18672 | Medium | 5.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Because of incorrect exception handling for Intents, a local at… |
CVE-2017-18671 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Intents related to Wi-Fi have incorrect exception handling, lea… |
CVE-2017-18670 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. android.intent.action.SIOP_LEVEL_CHANGED allows a serializable… |
CVE-2017-18663 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with N(7.x) software. Because of missing Intent exception handling, system_server can have a NullPointerExcep… |
CVE-2017-18659 | Medium | 5.3 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can crash system processes via a broadcast t… |
CVE-2016-11034 | Medium | 6.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. The decode function in Qjpeg in Qt 5.7 allows attackers to trigger a sys… |
CVE-2016-11026 | High | 7.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. BootReceiver allows attackers to trigger a system crash becaus… |
CVE-2020-1744 | Medium | 5.6 | 2020-03-24 | A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login ev… |
CVE-2020-0511 | Medium | 5.5 | 2020-03-12 | Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial o… |
CVE-2020-10101 | High | 7.5 | 2020-03-05 | An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is… |
CVE-2020-5403 | High | 7.5 | 2020-03-03 | Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing… |
CVE-2019-16302 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener d… |
CVE-2019-16301 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener… |
CVE-2019-16300 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not… |
CVE-2019-16299 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not… |
CVE-2019-16298 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the ho… |
CVE-2019-16297 | High | 7.5 | 2020-02-20 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does… |
CVE-2020-7247 | Critical | 9.8 | 2020-01-29 | smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via… |
CVE-2019-20422 | Medium | 5.5 | 2020-01-27 | In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision, leading to (… |
CVE-2015-2688 | High | 7.5 | 2020-01-24 | buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows r… |
CVE-2019-5593 | Medium | 5.5 | 2020-01-23 | Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builti… |
CVE-2020-2583 | Low | 3.7 | 2020-01-15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8… |
CVE-2019-9510 | Medium | 5.3 | 2020-01-15 | A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user ses… |
CVE-2020-0004 | Medium | 5.5 | 2020-01-08 | In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial o… |
CVE-2019-19313 | High | 7.5 | 2020-01-05 | GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and comm… |
CVE-2019-20218 | High | 7.5 | 2020-01-02 | selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. |
CVE-2019-19924 | Medium | 5.3 | 2019-12-24 | SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error ha… |
CVE-2019-14853 | High | 7.5 | 2019-11-26 | An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (… |
CVE-2019-13683 | Medium | 6.5 | 2019-11-25 | Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTM… |
CVE-2019-9536 | Medium | 6.1 | 2019-11-22 | Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the… |
CVE-2013-4584 | Medium | 5.9 | 2019-11-15 | Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers no… |
CVE-2019-17391 | Medium | 4.6 | 2019-11-14 | An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32… |
CVE-2019-0144 | Medium | 6.5 | 2019-11-14 | Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial… |
CVE-2019-0143 | Medium | 5.5 | 2019-11-14 | Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enab… |
CVE-2019-11177 | High | 7.5 | 2019-11-14 | Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network… |
CVE-2012-1109 | High | 7.5 | 2019-11-12 | mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions |
CVE-2019-10222 | High | 7.5 | 2019-11-08 | A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW serve… |
CVE-2011-2336 | Medium | 6.5 | 2019-11-07 | An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts. |
CVE-2011-2807 | Medium | 6.5 | 2019-11-07 | Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13. |
CVE-2011-4625 | High | 7.5 | 2019-11-06 | simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages. |
CVE-2019-18668 | Medium | 6.5 | 2019-11-02 | An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In… |
CVE-2009-5043 | Critical | 9.8 | 2019-10-31 | burn allows file names to escape via mishandled quotation marks |
CVE-2019-6848 | High | 8.6 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BM… |
CVE-2019-6847 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6844 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6843 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware… |
CVE-2019-6842 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6841 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware… |
CVE-2019-14287 | High | 8.8 | 2019-10-17 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorr… |