Weakness (CWE)
CWE-703: Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
Source: MITRE CWE-703
194 results · Feed
-
Medium 4.3
Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that …
-
Low 3.7
Denial of Service (DoS)
The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.
-
High 7.5
PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulner…
-
High 7.4
GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Bef…
-
Medium 6.5
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spo…
-
Medium 5.0CVE-2022-22265 Exploited
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary …
KEV Sep 18, 2023 -
Critical 9.1
Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products
An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On som…
-
Low 2.0
Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allow…
-
Medium 6.4
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attac…
-
Medium 4.5
Overriding the system configuration file causes a denial of service
Authenticated administrators may override the system configuration file and cause a denial of service.
-
High 7.5
Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart
A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) process…
-
Unscored —
Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via ex…
-
Unscored —
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to d…
-
Unscored —
Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set ar…
-
Medium 5.9
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured
A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart,…
-
High 7.4
Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.
On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash if a malformed DHCPv6 packet is received, resulting in a restart of th…
-
High 7.4
Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart
On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash with a core dump if a specific DHCPv6 packet is received, resulting in a r…
-
Medium 5.8
Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions …
-
Medium 6.1CVE-2021-25372 Exploited
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
KEV Jun 29, 2023 -
Medium 6.1CVE-2021-25370 Exploited
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory co…
KEV Nov 8, 2022 -
Low 3.2
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass …
-
Low 2.1
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal stora…
-
Low 2.5
Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allow…
-
Medium 6.5
Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic
In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately…
-
Unscored —
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulksc…
-
High 7.5
Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affe…
-
High 7.5
Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.
When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condi…
-
High 8.8
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, ve…
-
Medium 4.9
kubelet-started container uid changes to root after first restart or if image is already pulled to the node
In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will…
-
Unscored —
A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as …
-
Unscored —
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE…
-
Unscored —
When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any ma…
-
High 7.5
Insufficient Error Handling in http-proxy
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
-
Unscored —
A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME …