cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 119

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 4.1CVE-2023-28114EPSS 0.2%

    `cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user…

  2. 7.5CVE-2023-27087EPSS 0.6%

    Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.

  3. 4.3CVE-2023-25687EPSS 0.5%

    IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.

  4. 9.8CVE-2023-27595EPSS 0.7%

    Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the h…

  5. 5.5CVE-2023-1446EPSS 0.3%

    A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulat…

  6. 6.5CVE-2023-1444EPSS 1.3%

    A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of ser…

  7. 3.3CVE-2023-21462EPSS 0.2%

    The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.

  8. 7.5CVE-2023-27787EPSS 1.5%

    An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.

  9. 7.5CVE-2023-27786EPSS 1.5%

    An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.

  10. 7.5CVE-2023-27785EPSS 1.5%

    An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

  11. 7.5CVE-2023-27784EPSS 1.5%

    An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.

  12. 7.0CVE-2023-28466EPSS 0.3%

    do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

  13. 6.5CVE-2023-27102EPSS 0.7%

    Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.

  14. 5.5CVE-2022-45155EPSS 0.2%

    An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue …

  15. 5.3CVE-2023-25695EPSS 1.4%

    Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.

  16. 7.8CVE-2023-24910EPSS 0.4%

    Windows Graphics Component Elevation of Privilege Vulnerability

  17. 7.5CVE-2023-24859EPSS 1.7%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  18. 6.5CVE-2023-27587ExploitEPSS 3.9%

    ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an…

  19. 5.5CVE-2023-0973EPSS 0.2%

    STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.

  20. 5.5CVE-2023-1355EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

  21. 5.5CVE-2023-25947EPSS 0.2%

    The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HA…

  22. 5.5CVE-2023-24465EPSS 0.2%

    Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current applica…

  23. 5.5CVE-2023-27114EPSS 0.3%

    radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.

  24. 6.5CVE-2023-0845EPSS 1.0%

    Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

  25. 5.5CVE-2023-1264EPSS 0.4%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

  26. 6.7CVE-2023-20628EPSS 0.09%

    In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS074944…

  27. 5.5CVE-2022-3707EPSS 0.2%

    A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash …

  28. 5.5CVE-2023-1186EPSS 0.4%

    A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipula…

  29. 5.3CVE-2023-26052EPSS 0.8%

    Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive in…

  30. 4.3CVE-2023-26051EPSS 0.8%

    Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive in…

  31. 6.5CVE-2023-26479EPSS 1.1%

    XWiki Platform is a generic wiki platform. Starting in version 6.0, users with write rights can insert well-formed content that is not handled well by the parser. As a consequence, some pages becomes unusable, including the user index (if …

  32. 3.3CVE-2023-0196EPSS 0.2%

    NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.

  33. 7.5CVE-2020-5026EPSS 0.7%

    IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informati…

  34. 5.5CVE-2023-23006EPSS 0.2%

    In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

  35. 5.5CVE-2023-23005EPSS 0.3%

    In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there ar…

  36. 5.5CVE-2023-23004EPSS 0.3%

    In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

  37. 4.0CVE-2023-23003EPSS 0.3%

    In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value.

  38. 5.5CVE-2023-23002EPSS 0.2%

    In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

  39. 5.5CVE-2023-23001EPSS 0.2%

    In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

  40. 5.5CVE-2023-23000EPSS 0.3%

    In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.

  41. 7.8CVE-2023-1127EPSS 0.5%

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.

  42. 5.5CVE-2023-24758EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  43. 5.5CVE-2023-24757EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  44. 5.5CVE-2023-24756EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  45. 5.5CVE-2023-24755EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  46. 5.5CVE-2023-24754EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  47. 5.5CVE-2023-24752EPSS 0.3%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  48. 6.5CVE-2023-24751EPSS 0.8%

    libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

  49. 5.5CVE-2023-1095EPSS 0.2%

    In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zer…

  50. 5.5CVE-2023-22999EPSS 0.3%

    In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an error pointer).