Improper Handling of Exceptional Conditions
CWE-755
The product does not handle or incorrectly handles an exceptional condition.
We track 154 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0. 7 have been exploited in real attacks.
Latest Improper Handling of Exceptional Conditions vulnerabilities
- 7.8 High severity
Dell Power Manager (DPM): Improper Handling of Exceptional Conditions
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system.
- 9.8 Critical severity
Red Hat build of Quarkus 2.13.9.Final: Improper Handling of Exceptional Conditions
A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and applied. This does not hap
- 7.5 High severity
PI Server: Improper Handling of Exceptional Conditions
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.
- 7.5 High severity
Json.net: Improper Handling of Exceptional Conditions
Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending
- 7.5 High severity
revanced-api: Improper Handling of Exceptional Conditions
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This
- 8.8 High severity
Firefox: Improper Handling of Exceptional Conditions
TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.
- 7.5 High severity
webhooks.js: Improper Handling of Exceptional Conditions
octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused by an issue with error handling in the @octokit/webhooks library because the error can be undefined i
- 7.5 High severity
Opc: Improper Handling of Exceptional Conditions
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.
- 7.5 High severity
MC801A: Improper Handling of Exceptional Conditions
There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack.
- 7.5 High severity
Samsung Data Store: Improper Handling of Exceptional Conditions
Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.
- 7.5 High severity
Elasticsearch: Improper Handling of Exceptional Conditions
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
- 7.5 High severity
Typha: Improper Handling of Exceptional Conditions
In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() c
- 7.5 High severity
Red Hat Enterprise Linux 8: Improper Handling of Exceptional Conditions
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a la
- 7.8 High severity
Nconvert: Improper Handling of Exceptional Conditions
XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.
- 7.5 High severity
Junos OS: Improper Handling of Exceptional Conditions
An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial o
- 7.5 High severity
BIG-IP: Improper Handling of Exceptional Conditions
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- 8.6 High severity
Cisco Identity Services Engine Software: Improper Handling of Exceptional Conditions
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of c
- 7.5 High severity
lua-http: Improper Handling of Exceptional Conditions
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server. Such a request causes the program to
- 8.4 High severity
EBTS/MBTS Base Radio: Improper Handling of Exceptional Conditions
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able t
- 9.8 Critical severity
AXIS License Plate Verifier: Improper Handling of Exceptional Conditions
Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application.
- 9.8 Critical severity
AXIS License Plate Verifier: Improper Handling of Exceptional Conditions
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems.
- 7.5 High severity
Control Id Idsecure: Improper Handling of Exceptional Conditions
An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service.
- 7.5 High severity
Junos OS: Improper Handling of Exceptional Conditions
An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices (AMS) interface on the device,
- 7.5 High severity
HarmonyOS: Improper Handling of Exceptional Conditions
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
Moveit Transfer: Improper Handling of Exceptional Conditions
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause t
- 7.5 High severity
MT6739, MT8167, MT8168, MT8321, MT8365…: Improper Handling of Exceptional Conditions
In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664720; Issue ID: ALPS07
- 8.2 High severity
CIRCL: Improper Handling of Exceptional Conditions
When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret. T
- 7.8 High severity
Exynos 5123 Firmware: Improper Handling of Exceptional Conditions
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface.
- 7.7 High severity
NVIDIA ConnectX Firmware: Improper Handling of Exceptional Conditions
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service.
- 8.7 High severity
moby: Observable Discrepancy
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly r
- 9.8 Critical severity
comrak: Improper Handling of Exceptional Conditions
comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with `parse_document`. This AST can then be converted to HTML via `html::format_d
- 7.8 High severity
Pdf-xchange Editor: Improper Handling of Exceptional Conditions
A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large
- 9.8 Critical severity
Netatalk: Improper Handling of Exceptional Conditions
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parse_entries function. The issue results from the lac
- 7.8 High severity
Android: Improper Handling of Exceptional Conditions
In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi
- 9.8 Critical severity
cilium: Improper Handling of Exceptional Conditions
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implemen
- 9.8 Critical severity
Misp: Improper Handling of Exceptional Conditions
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php.
- 9.8 Critical severity
datahub: Improper Handling of Exceptional Conditions
DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service (JAAS) authentication and that system is given a configuration which contains an error, the authentication for the system will fail open a
- 7.5 High severity
Junos OS: Improper Handling of Exceptional Conditions
A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue us
- 7.8 High severity
Trend Micro Apex One: Improper Handling of Exceptional Conditions
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-
- 7.5 High severity
yauaa: Improper Handling of Exceptional Conditions
Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the