cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 135

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 5.5CVE-2021-40564EPSS 0.9%

    A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes a denial of service.

  2. 5.5CVE-2021-40563EPSS 0.9%

    A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denial of service.

  3. 5.5CVE-2021-40559EPSS 0.8%

    A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service.

  4. 7.5CVE-2022-21676EPSS 2.9%

    Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the No…

  5. 5.5CVE-2020-25427EPSS 0.7%

    A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service.

  6. 7.8CVE-2022-22265KEVEPSS 0.4%

    An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

  7. 7.5CVE-2022-21667EPSS 1.7%

    soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of …

  8. 5.5CVE-2021-46051EPSS 0.7%

    A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .

  9. 5.5CVE-2021-46049EPSS 0.6%

    A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.

  10. 5.5CVE-2021-46047EPSS 0.7%

    A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.

  11. 5.5CVE-2021-46046EPSS 0.6%

    A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).

  12. 7.5CVE-2021-40039EPSS 0.6%

    There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

  13. 7.5CVE-2021-40031EPSS 0.6%

    There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

  14. 7.5CVE-2021-40027EPSS 0.9%

    The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.

  15. 7.5CVE-2021-40018EPSS 0.7%

    The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

  16. 2.7CVE-2021-38894EPSS 1.0%

    IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against …

  17. 5.5CVE-2021-46044EPSS 0.6%

    A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent).

  18. 5.5CVE-2021-46043EPSS 0.6%

    A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.

  19. 5.5CVE-2021-46042EPSS 0.7%

    A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service.

  20. 5.5CVE-2021-46040EPSS 0.7%

    A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent).

  21. 5.5CVE-2021-46039EPSS 0.7%

    A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent).

  22. 5.5CVE-2021-46038EPSS 0.6%

    A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).

  23. 5.5CVE-2021-45831EPSS 0.6%

    A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.

  24. 5.3CVE-2022-0083EPSS 0.9%

    livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

  25. 4.6CVE-2021-20870EPSS 0.3%

    Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450…

  26. 7.5CVE-2021-39988EPSS 0.7%

    The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

  27. 7.5CVE-2021-39977EPSS 0.7%

    The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

  28. 7.5CVE-2021-39973EPSS 0.7%

    There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

  29. 5.3CVE-2021-37118EPSS 0.6%

    The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.

  30. 7.5CVE-2020-23026EPSS 1.1%

    A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).

  31. 5.5CVE-2021-30283EPSS 0.1%

    Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

  32. 7.8CVE-2021-30272EPSS 0.2%

    Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon …

  33. 7.8CVE-2021-30271EPSS 0.2%

    Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consume…

  34. 7.8CVE-2021-30270EPSS 0.2%

    Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO…

  35. 7.8CVE-2021-30269EPSS 0.2%

    Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon In…

  36. 7.8CVE-2021-1894EPSS 0.2%

    Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Musi…

  37. 5.3CVE-2022-0079EPSS 1.0%

    showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

  38. 7.5CVE-2021-4186EPSS 2.3%

    Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

  39. 7.5CVE-2021-4188EPSS 0.9%

    mruby is vulnerable to NULL Pointer Dereference

  40. 5.3CVE-2021-4177EPSS 1.0%

    livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

  41. 7.8CVE-2018-4302EPSS 0.9%

    A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpe…

  42. 5.5CVE-2021-45267EPSS 0.7%

    An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.

  43. 7.5CVE-2021-45266EPSS 1.1%

    A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.

  44. 5.5CVE-2021-45260EPSS 0.6%

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.

  45. 5.5CVE-2021-45259EPSS 0.7%

    An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.

  46. 5.5CVE-2021-45256EPSS 0.7%

    A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.

  47. 5.5CVE-2021-44927EPSS 0.7%

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.

  48. 5.5CVE-2021-44926EPSS 0.6%

    A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.

  49. 5.5CVE-2021-44925EPSS 0.6%

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.

  50. 5.5CVE-2021-44923EPSS 0.6%

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.