Перейти к содержимому
Noroxi

CWE-755 · 437 записей

Improper Handling of Exceptional Conditions

CVE этого класса

437 записей

  • CVE-2017-5638
    99Срочно

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %

    apache · struts10 мар. 2017 г.

  • CVE-2021-38003
    77На этой неделе

    Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption v

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 38 %

    google · chrome23 нояб. 2021 г.

  • CVE-2024-29748
    61На этой неделе

    there is a possible way to bypass due to a logic error in the code.

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 0 %

    google · android5 апр. 2024 г.

  • CVE-2019-12815
    56В плане

    An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without

    КритическаяCVSS 9,8Proof of conceptEPSS 57 %

    proftpd · proftpd19 июл. 2019 г.

  • CVE-2019-14287
    54В плане

    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, a

    ВысокаяCVSS 8,8Proof of conceptEPSS 63 %

    sudo project · sudo17 окт. 2019 г.

  • CVE-2023-36933
    52В плане

    In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is

    ВысокаяCVSS 7,5Эксплойта нетEPSS 72 %

    progress · moveit transfer5 июл. 2023 г.

  • CVE-2018-0934
    50В плане

    ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakr

    ВысокаяCVSS 7,5Proof of conceptEPSS 66 %

    microsoft · edge14 мар. 2018 г.

  • CVE-2019-6848
    44В плане

    A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication mod

    ВысокаяCVSS 8,6Эксплойта нетEPSS 32 %

    schneider-electric · modicon m580 firmware29 окт. 2019 г.

  • CVE-2020-5807
    42В плане

    An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics ev

    ВысокаяCVSS 7,5Эксплойта нетEPSS 39 %

    rockwellautomation · factorytalk diagnostics29 дек. 2020 г.

  • CVE-2019-17195
    42В плане

    Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash

    КритическаяCVSS 9,8Proof of conceptEPSS 11 %

    connect2id · nimbus jose\+jwt15 окт. 2019 г.

  • CVE-2022-23121
    42В плане

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    КритическаяCVSS 9,8Эксплойта нетEPSS 8 %

    netatalk · netatalk28 мар. 2023 г.

  • CVE-2024-21907
    40В плане

    Improper Handling of Exceptional Conditions in Newtonsoft.Json

    ВысокаяCVSS 7,5Proof of conceptEPSS 32 %

    newtonsoft · json.net3 янв. 2024 г.

  • CVE-2019-14378
    40В плане

    ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the firs

    ВысокаяCVSS 8,8Proof of conceptEPSS 16 %

    libslirp project · libslirp29 июл. 2019 г.

  • CVE-2021-43272
    40В плане

    An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11.

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    opendesign · oda viewer14 нояб. 2021 г.

  • CVE-2019-14431
    40В плане

    In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    matrixssl · matrixssl29 июл. 2019 г.

  • CVE-2020-24753
    40В плане

    A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execut

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    objective open cbor run-time project · objective open cbor run-time17 сент. 2020 г.

  • CVE-2019-6256
    40В плане

    A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    live555 · live555 media server14 янв. 2019 г.

  • CVE-2018-19991
    40В плане

    VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args o

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    verynginx project · verynginx9 дек. 2018 г.

  • CVE-2022-31799
    40В плане

    Bottle before 0.12.20 mishandles errors during early request binding.

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    bottlepy · bottle2 июн. 2022 г.

  • CVE-2017-2877
    40В плане

    A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    foscam · c1 firmware19 сент. 2018 г.

  • CVE-2020-5801
    39Наблюдать

    An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDMana

    ВысокаяCVSS 7,5Эксплойта нетEPSS 29 %

    rockwellautomation · factorytalk linx29 дек. 2020 г.

  • CVE-2021-36128
    39Наблюдать

    An issue was discovered in the CentralAuth extension in MediaWiki through 1.36.

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    mediawiki · mediawiki2 июл. 2021 г.

  • CVE-2021-38384
    39Наблюдать

    Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a developer to implem

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    serverless offline project · serverless offline10 авг. 2021 г.

  • CVE-2022-48328
    39Наблюдать

    app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    misp-project · misp20 февр. 2023 г.

  • CVE-2023-28631
    39Наблюдать

    Attacker controlled data in AST nodes is not validated in comrak

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    comrak project · comrak28 мар. 2023 г.

Все классы уязвимостей