Improper Check or Handling of Exceptional Conditions
CWE-703
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
We track 63 vulnerabilities of this type. 97% are rated high or critical, and the average CVSS score is 7.8. 3 have been exploited in real attacks.
Latest Improper Check or Handling of Exceptional Conditions vulnerabilities
- 8.1 High severity
AppPresser – Mobile App Framework: Improper Check for Unusual or Exceptional Conditions
The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to
- 7.5 High severity
FortiOS: Improper Check or Handling of Exceptional Conditions
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
- 7.5 High severity
Connect Secure: Improper Check or Handling of Exceptional Conditions
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause s
- 9.8 Critical severity
Connect Secure: Out-of-bounds Write
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain co
- 8.2 High severity
Connect Secure: Out-of-bounds Write
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain c
- 7.5 High severity
Connect Secure: NULL Pointer Dereference
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack
- 7.5 High severity
PI Server: Improper Handling of Exceptional Conditions
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.
- 7.5 High severity
evm: Improper Check or Handling of Exceptional Conditions
Rust EVM is an Ethereum Virtual Machine interpreter. In `rust-evm`, a feature called `record_external_operation` was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particul
- 7.5 High severity
Video Recording Manager: Improper Check or Handling of Exceptional Conditions
An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
- 7.5 High severity
Typha: Improper Handling of Exceptional Conditions
In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() c
- 7.5 High severity
Zephyr: Improper Check or Handling of Exceptional Conditions
The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception.
- 7.5 High severity
Junos OS: Improper Check or Handling of Exceptional Conditions
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading
- 7.7 High severity
NVIDIA ConnectX Firmware: Improper Handling of Exceptional Conditions
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service.
- 7.5 High severity
Junos OS: Improper Check for Unusual or Exceptional Conditions
An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a Denial of Service. Continued receipt and processing of these packets will create
- 7.5 High severity
Junos OS: Improper Check or Handling of Exceptional Conditions
An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when spec
- 7.5 High severity
Nako3edit, editor component of nadesiko3 (PC…: Improper Check or Handling of Exceptional Conditions
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to
- 7.5 High severity
HarmonyOS: Improper Check or Handling of Exceptional Conditions
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
- 7.5 High severity
synapse: Improper Handling of Exceptional Conditions
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specification specifies a list of [event authorization rules](https://spec.matrix.org/v1.2/rooms/v9/#authorization-rules) which must be checked when det
- 7.5 High severity
Axeda agent: Improper Check for Unusual or Exceptional Conditions
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnera
- 7.8 High severity
GlobalProtect App: Improper Handling of Exceptional Conditions
An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Befo
- 7.8 High severity
Samsung Mobile Devices Use-After-Free Exploited
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
- 6.7 Medium severity
Samsung Mobile Devices Improper Boundary Check Exploited
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
- 4.4 Medium severity
Samsung Mobile Devices Memory Corruption Exploited
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.