cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 112

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 5.3CVE-2023-5514EPSS 0.4%

    The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local file system structure.

  2. 7.5CVE-2023-46240EPSS 0.8%

    CodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be l…

  3. 7.5CVE-2023-46239EPSS 1.0%

    quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil p…

  4. 6.5CVE-2023-46867EPSS 0.6%

    In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference.

  5. 4.7CVE-2023-46862EPSS 0.2%

    An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.

  6. 7.5CVE-2023-46393EPSS 0.5%

    gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

  7. 7.5CVE-2023-46345EPSS 0.7%

    Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.

  8. 5.5CVE-2023-46316EPSS 0.4%

    In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

  9. 7.5CVE-2023-46135EPSS 1.0%

    rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_payload_len` should not above 64. This vulnerability has been patched in version 0.0.8.

  10. 5.5CVE-2023-45680EPSS 0.6%

    stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is set to `NULL`, but…

  11. 7.5CVE-2023-45667EPSS 1.3%

    stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the f…

  12. 6.5CVE-2023-45820EPSS 0.8%

    Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. A malicious user …

  13. 7.8CVE-2023-43251EPSS 0.6%

    XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

  14. 7.5CVE-2023-45812EPSS 0.9%

    The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service (DoS) type vulnerability which causes the Ro…

  15. 5.3CVE-2022-43891EPSS 0.7%

    IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the…

  16. 7.5CVE-2023-4457EPSS 0.5%

    Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.2.2 are vulnerable to an information disclosure vulnerability. The plugin did not properly sanitiz…

  17. 7.5CVE-2023-5590EPSS 1.0%

    NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

  18. 7.8CVE-2023-5586EPSS 0.4%

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

  19. 4.9CVE-2023-32970EPSS 0.6%

    A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.…

  20. 7.5CVE-2023-5563EPSS 0.5%

    The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception.

  21. 6.5CVE-2023-44203EPSS 0.3%

    An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600 allows a adjacent attacker to send specif…

  22. 7.5CVE-2023-44199EPSS 0.6%

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On …

  23. 7.5CVE-2023-44198EPSS 0.4%

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networ…

  24. 6.5CVE-2023-44196EPSS 0.3%

    An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on PTX10003 Series allows an unauthenticated adjacent attacker to cause an impact to the integrity of the sy…

  25. 8.8CVE-2023-44182EPSS 0.7%

    An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web Us…

  26. 7.5CVE-2023-44186EPSS 0.6%

    An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, …

  27. 5.3CVE-2023-41304EPSS 0.3%

    Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.

  28. 7.5CVE-2023-38171EPSS 71%

    Microsoft QUIC Denial of Service Vulnerability

  29. 7.5CVE-2023-36709EPSS 2.7%

    Microsoft AllJoyn API Denial of Service Vulnerability

  30. 7.5CVE-2023-36603EPSS 2.5%

    Windows TCP/IP Denial of Service Vulnerability

  31. 7.5CVE-2023-36602EPSS 2.5%

    Windows TCP/IP Denial of Service Vulnerability

  32. 7.5CVE-2023-41085EPSS 0.6%

    When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  33. 4.3CVE-2023-42475EPSS 0.5%

    The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.

  34. 5.5CVE-2023-5441EPSS 0.4%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

  35. 5.5CVE-2023-42754EPSS 0.4%

    A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs.…

  36. 5.5CVE-2023-43898EPSS 0.3%

    Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

  37. 7.5CVE-2023-24847EPSS 0.4%

    Transient DOS in Modem while allocating DSM items.

  38. 5.5CVE-2023-37605EPSS 0.2%

    Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter.

  39. 7.5CVE-2023-44488EPSS 2.2%

    VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

  40. 7.5CVE-2023-30591EPSS 59%

    Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing arr…

  41. 6.5CVE-2023-5215EPSS 0.8%

    A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that do…

  42. 3.5CVE-2023-41332EPSS 0.5%

    Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cilium's Layer 7 proxy has been disabled, creating workloads with `policy.cilium.io/proxy-visibility` annotations (in Ciliu…

  43. 9.8CVE-2023-39375EPSS 0.8%

    SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

  44. 5.5CVE-2023-0833EPSS 0.4%

    A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attack…

  45. 7.5CVE-2022-48606EPSS 0.5%

    Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.

  46. 8.8CVE-2023-41027EPSS 0.9%

    Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulne…

  47. 8.8CVE-2023-41993KEVEPSS 24%

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions…

  48. 7.8CVE-2023-41992KEVEPSS 9.5%

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue ma…

  49. 6.5CVE-2023-25526EPSS 0.3%

    NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet. A successful exploit may lead to denial of service.

  50. 7.5CVE-2023-42447EPSS 0.6%

    blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turned into a gradient of colors representing the original image. In version 0.1.1, the blurhash parsing code may panic due …