cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 126

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 5.5CVE-2022-1975EPSS 0.2%

    There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.

  2. 7.5CVE-2022-1319EPSS 1.7%

    A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused …

  3. 5.5CVE-2022-1263EPSS 0.4%

    A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that result…

  4. 4.7CVE-2022-1205EPSS 0.4%

    A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

  5. 5.5CVE-2020-35538EPSS 0.3%

    A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

  6. 7.5CVE-2022-27563EPSS 0.8%

    An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

  7. 6.5CVE-2022-34368EPSS 0.4%

    Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to …

  8. 6.5CVE-2021-46837EPSS 4.7%

    res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a …

  9. 7.5CVE-2022-39028EPSS 2.3%

    telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would …

  10. 7.5CVE-2022-1199EPSS 2.2%

    A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.

  11. 4.8CVE-2022-0485EPSS 1.0%

    A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *e…

  12. 4.4CVE-2022-0168EPSS 0.3%

    A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, …

  13. 5.5CVE-2021-4216EPSS 0.2%

    A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream.

  14. 5.5CVE-2022-2980EPSS 0.9%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

  15. 5.5CVE-2021-33844EPSS 0.5%

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.

  16. 5.5CVE-2021-23210EPSS 0.5%

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.

  17. 5.5CVE-2020-27802EPSS 0.3%

    An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.

  18. 7.5CVE-2021-42521EPSS 1.3%

    There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe …

  19. 3.3CVE-2021-4217EPSS 0.6%

    A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code e…

  20. 6.5CVE-2021-4209EPSS 1.9%

    A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare ci…

  21. 5.3CVE-2021-4189EPSS 3.4%

    A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a…

  22. 6.0CVE-2021-4158EPSS 0.4%

    A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

  23. 7.5CVE-2021-3998EPSS 2.2%

    A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

  24. 5.5CVE-2022-2923EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

  25. 5.5CVE-2021-3659EPSS 0.3%

    A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this …

  26. 7.5CVE-2021-3513EPSS 0.8%

    A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnera…

  27. 6.5CVE-2022-36031EPSS 1.0%

    Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the `filename_disk` value to a folder and accessing that file through the `/assets` e…

  28. 5.5CVE-2020-27790EPSS 0.3%

    A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of ser…

  29. 5.5CVE-2022-2874EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.

  30. 7.5CVE-2022-35173EPSS 1.4%

    An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation.

  31. 7.5CVE-2022-2547EPSS 1.6%

    A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

  32. 7.5CVE-2022-2337EPSS 1.6%

    A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

  33. 7.5CVE-2022-1748EPSS 1.1%

    Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

  34. 7.5CVE-2022-36186EPSS 0.9%

    A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS). This vulnerability was fixed in …

  35. 5.5CVE-2022-38235EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.

  36. 5.5CVE-2022-38234EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.

  37. 5.5CVE-2022-38233EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc.

  38. 5.5CVE-2022-36153EPSS 0.3%

    tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const at /bits/stl_vector.h.

  39. 5.5CVE-2022-36151EPSS 0.3%

    tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.

  40. 5.5CVE-2022-36145EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord().

  41. 5.5CVE-2022-36141EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::write(SWF::Writer*, SWF::Context*).

  42. 5.5CVE-2022-36140EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF::Writer*, SWF::Context*).

  43. 6.5CVE-2022-35484EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.

  44. 6.5CVE-2022-35473EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.

  45. 6.5CVE-2022-35469EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384.

  46. 5.5CVE-2022-35108EPSS 0.3%

    SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.

  47. 7.5CVE-2022-2832EPSS 1.8%

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

  48. 5.3CVE-2021-39086EPSS 1.0%

    IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This …

  49. 6.5CVE-2022-20334EPSS 0.2%

    In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr…

  50. 6.5CVE-2022-20333EPSS 0.2%

    In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr…