Skip to content
OpenAdvisories

Weakness (CWE)

CWE-755: Improper Handling of Exceptional Conditions

Class Incomplete Mapping discouraged

The product does not handle or incorrectly handles an exceptional condition.

Source: MITRE CWE-755

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2026-52856 Public exploit

    Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

    Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.

    pterodactyl wings github.com/pterodactyl/wings Go
  • High 7.5
    CVE-2025-43864 Public exploit EPSS 20%

    React Router allows a DoS via cache poisoning by forcing SPA mode

    React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes a…

    remix-run react-router react-router npm
  • High 7.5
    CVE-2024-21907 Public exploit EPSS 33%

    Improper Handling of Exceptional Conditions in Newtonsoft.Json

    Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending…

    Newtonsoft.Json newtonsoft-json Ubuntu NuGet
  • High 8.8
    CVE-2021-38003 Exploited Public exploit EPSS 39%

    Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 7.5
    CVE-2021-28165 Public exploit EPSS 54%

    Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources

    In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

    The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven
  • High 7.5
    CVE-2020-26160 Public exploit

    Authorization bypass in github.com/dgrijalva/jwt-go

    jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if th…

    gitea golang-github-coreos-discovery-etcd-io golang-github-dgrijalva-jwt-go golang-github-dgrijalva-jwt-go Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2019-10742 Public exploit

    Denial of Service in axios

    Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

    axios axios node-axios axios Debian npm
  • High 8.1
    CVE-2018-8039 Public exploit

    Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

    It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the Ho…

    Apache Software Foundation Apache CXF org.apache.cxf:apache-cxf org.apache.cxf:cxf-rt-transports-http Maven