cve.bz

OWASP A10:2025 Mishandling of Exceptional Conditions vulnerabilities, newest first, page 154

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A10:2025 at MITRE.

Its weaknesses: 24

CWE-209, CWE-215, CWE-234, CWE-235, CWE-248, CWE-252, CWE-274, CWE-280, CWE-369, CWE-390, CWE-391, CWE-394, CWE-396, CWE-397, CWE-460, CWE-476, CWE-478, CWE-484, CWE-550, CWE-636, CWE-703, CWE-754, CWE-755, CWE-756

  1. 5.3CVE-2020-9074EPSS 0.7%

    Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed mes…

  2. 7.5CVE-2020-13848EPSS 3.6%

    Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURL…

  3. 7.5CVE-2019-20829EPSS 1.6%

    An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.

  4. 7.5CVE-2019-20826EPSS 1.6%

    An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.

  5. 7.5CVE-2019-20824EPSS 1.6%

    An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.

  6. 7.5CVE-2018-21236EPSS 1.0%

    An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.

  7. 7.5CVE-2019-20821EPSS 1.6%

    An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.

  8. 7.5CVE-2019-20820EPSS 1.6%

    An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.

  9. 7.5CVE-2019-20817EPSS 1.6%

    An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.

  10. 7.5CVE-2019-20816EPSS 1.6%

    An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.

  11. 7.5CVE-2019-20813EPSS 1.6%

    An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.

  12. 6.5CVE-2020-6503EPSS 0.8%

    Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

  13. 6.5CVE-2020-13775EPSS 1.8%

    ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.

  14. 2.5CVE-2020-13659EPSS 0.4%

    address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.

  15. 7.5CVE-2020-10739EPSS 2.4%

    Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Serv…

  16. 6.5CVE-2020-10703EPSS 2.4%

    A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools cr…

  17. 5.5CVE-2020-12867EPSS 0.5%

    A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.

  18. 2.7CVE-2020-4248EPSS 1.0%

    IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks aga…

  19. 7.5CVE-2020-13649EPSS 2.2%

    parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all assertion failure.

  20. 5.5CVE-2020-13632EPSS 0.6%

    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

  21. 4.3CVE-2020-4357EPSS 1.0%

    IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the syst…

  22. 4.4CVE-2019-20806EPSS 0.4%

    An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.

  23. 5.5CVE-2020-13435EPSS 0.6%

    SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

  24. 5.9CVE-2020-10711EPSS 3.1%

    A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bit…

  25. 6.8CVE-2020-1071EPSS 1.0%

    An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To explo…

  26. 8.8CVE-2020-1069EPSS 4.0%

    A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a speci…

  27. 7.5CVE-2020-10957EPSS 7.2%

    In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

  28. 5.3CVE-2020-12888EPSS 0.4%

    The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

  29. 4.9CVE-2020-1995EPSS 1.1%

    A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this request result in denial of service to all…

  30. 9.8CVE-2020-1939EPSS 2.6%

    The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not aff…

  31. 5.5CVE-2020-12767EPSS 0.5%

    exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

  32. 7.8CVE-2020-7291EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  33. 7.8CVE-2020-7290EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  34. 7.8CVE-2020-7289EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  35. 7.8CVE-2020-7288EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  36. 7.8CVE-2020-7287EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  37. 7.8CVE-2020-7286EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  38. 7.8CVE-2020-7285EPSS 0.3%

    Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

  39. 8.4CVE-2020-7267EPSS 0.3%

    Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a Mc…

  40. 8.4CVE-2020-7266EPSS 0.3%

    Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redir…

  41. 8.4CVE-2020-7265EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action …

  42. 8.4CVE-2020-7264EPSS 0.3%

    Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McA…

  43. 5.3CVE-2019-18865EPSS 1.1%

    Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames.

  44. 5.5CVE-2019-12864EPSS 0.5%

    SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via …

  45. 6.0CVE-2020-7453EPSS 0.3%

    In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jail_set configuration option "osrelease" may return m…

  46. 4.3CVE-2019-4729EPSS 1.6%

    IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM …

  47. 7.5CVE-2020-10664EPSS 1.4%

    The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.

  48. 7.5CVE-2020-11012EPSS 1.9%

    MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access…

  49. 5.9CVE-2020-12105EPSS 1.7%

    OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.

  50. 6.5CVE-2020-4085EPSS 0.8%

    "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."