cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 121

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 9.8CVE-2022-45101EPSS 0.8%

    Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and r…

  2. 7.8CVE-2023-0512EPSS 0.5%

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

  3. 9.8CVE-2022-45788EPSS 1.2%

    A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the cont…

  4. 5.3CVE-2023-0572EPSS 0.7%

    Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

  5. 6.5CVE-2023-22737EPSS 0.7%

    wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Con…

  6. 5.3CVE-2022-39380EPSS 0.6%

    Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the con…

  7. 5.5CVE-2022-4285EPSS 0.4%

    An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

  8. 5.5CVE-2023-0394EPSS 1.0%

    A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.

  9. 7.5CVE-2022-44018EPSS 0.9%

    In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application.

  10. 7.8CVE-2022-47024EPSS 0.3%

    A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.

  11. 7.8CVE-2022-47021EPSS 0.4%

    A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.

  12. 6.5CVE-2022-47015EPSS 1.6%

    MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.

  13. 6.5CVE-2023-0397EPSS 0.5%

    A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

  14. 7.5CVE-2023-0122EPSS 1.3%

    A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fi…

  15. 5.5CVE-2022-47929EPSS 1.0%

    In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc…

  16. 5.5CVE-2022-4121EPSS 0.6%

    In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

  17. 7.5CVE-2022-41860EPSS 1.2%

    In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will deref…

  18. 7.1CVE-2022-41858EPSS 0.3%

    A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal ke…

  19. 7.5CVE-2023-0158EPSS 0.7%

    NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" endpoint. Prior to 0.12.1 a direct query for any existing directory under "/rrdp/", rather than an RRDP file such as "/rr…

  20. 7.5CVE-2023-22413EPSS 0.7%

    An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or M…

  21. 7.5CVE-2023-22393EPSS 0.6%

    An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with inv…

  22. 7.5CVE-2023-22391EPSS 0.6%

    A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly…

  23. 5.5CVE-2022-4842EPSS 0.2%

    A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.

  24. 5.3CVE-2022-46371EPSS 0.5%

    Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name.

  25. 5.3CVE-2022-3341EPSS 0.9%

    A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null …

  26. 8.2CVE-2022-43393EPSS 0.6%

    An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and…

  27. 7.8CVE-2023-21789EPSS 1.0%

    3D Builder Remote Code Execution Vulnerability

  28. 7.5CVE-2023-21758EPSS 93%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  29. 7.5CVE-2023-21757EPSS 2.1%

    Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

  30. 7.5CVE-2023-21683EPSS 2.0%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  31. 7.5CVE-2023-21547EPSS 89%

    Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  32. 9.8CVE-2017-20166EPSS 1.3%

    Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.

  33. 7.5CVE-2022-43972EPSS 1.4%

    A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticat…

  34. 7.5CVE-2023-22477EPSS 1.1%

    Mercurius is a GraphQL adapter for Fastify. Any users of Mercurius until version 10.5.0 are subjected to a denial of service attack by sending a malformed packet over WebSocket to `/graphql`. This issue was patched in #940. As a workaround…

  35. 7.5CVE-2022-33299EPSS 0.4%

    Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

  36. 7.5CVE-2022-33290EPSS 0.4%

    Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

  37. 9.8CVE-2022-0668EPSS 0.6%

    JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.

  38. 7.5CVE-2020-36646EPSS 1.2%

    A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to…

  39. 7.8CVE-2022-47094EPSS 0.3%

    GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid

  40. 7.5CVE-2023-22626EPSS 0.9%

    PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on database user privileges, this may only be information from the database, or may be information from file…

  41. 6.7CVE-2022-32659EPSS 0.3%

    In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: G…

  42. 6.7CVE-2022-32658EPSS 0.3%

    In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: G…

  43. 6.7CVE-2022-32657EPSS 0.3%

    In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: G…

  44. 7.5CVE-2015-10012EPSS 0.9%Unsupported when assigned

    A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to…

  45. 9.8CVE-2017-20160EPSS 0.9%

    A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible t…

  46. 5.5CVE-2022-34683EPSS 0.3%

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service.

  47. 5.5CVE-2022-34682EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference, which may lead to denial of service.

  48. 5.5CVE-2022-34679EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a null-pointer dereference, which may lead to denial of service.

  49. 5.5CVE-2022-34678EPSS 0.2%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer dereference, which may lead to denial of service.

  50. 5.5CVE-2022-34675EPSS 0.2%

    NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.