CWE-703

Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

154 vulnerabilities with CWE-703
CVE-2023-28959 MEDIUM
Juniper Junos OS QFX10002 DoS via Malformed Packet
CVSS 6.5
CVE-2023-29194 MEDIUM
Vitess < 16.0.1 - Denial of Service via Keyspace Name with Forward Slash
CVSS 4.1
CVE-2023-0004 MEDIUM
Palo Alto Networks PAN-OS - Privilege Escalation
CVSS 6.5
CVE-2023-21036 MEDIUM
Android - Improper Image Truncation in BitmapExport.java
CVSS 5.5
CVE-2023-21026 MEDIUM
Android 13 - Denial of Service via WindowManagerService Input Channel Logic Error
CVSS 5.5
CVE-2023-0397 CRITICAL
Zephyr < 3.2.0 - Denial of Service via Bluetooth LE Buffer Size Input
CVSS 9.6
CVE-2023-22413 HIGH
Juniper Junos < 19.4 - Unauthenticated Denial of Service via IPsec Library Exception Handling
CVSS 7.5
CVE-2022-34472 MEDIUM
Firefox <102, Thunderbird <91.11 - Info Disclosure
CVSS 4.3
CVE-2022-39911 MEDIUM
Samsung Pass <4.0.06.1 - Info Disclosure
CVSS 4.8
CVE-2022-41777 HIGH
nadesiko3 < 3.3.74 - Denial of Service via Invalid decodeURIComponent Input
CVSS 7.5
CVE-2022-20924 HIGH
Cisco Adaptive Security Appliance Software - Authenticated Denial of Service via SNMP Request
CVSS 7.7
CVE-2022-22224 MEDIUM
Juniper Networks Junos OS/Junos OS Evolved - DoS
CVSS 6.5
CVE-2022-41589 HIGH
Huawei EMUI - Denial of Service via DFX Unwind Stack Module
CVSS 7.5
CVE-2022-31152 MEDIUM
Synapse < 1.62.0 - Event Authorization Rule Bypass via Exceptional Condition Handling
CVSS 6.4
CVE-2022-23004 MEDIUM
Western Digital Sweet B - Denial of Service via P-256 Curve Point Multiplication
CVSS 5.3
CVE-2022-23003 MEDIUM
Western Digital Sweet B - Incorrect Calculation in NIST P-256 Curve Operations
CVSS 5.3
CVE-2022-23002 MEDIUM
Western Digital Sweet B - Denial of Service via P-256 Elliptic Curve Point Compression/Decompression
CVSS 5.3
CVE-2022-30738 MEDIUM
Samsung Internet < 17.0.1.69 - Address Bar Spoofing via Loader Script Execution
CVSS 4.3
CVE-2022-27841 MEDIUM
Samsung Pass < 3.7.07.5 - Unauthenticated Screen Exposure via Improper Exception Handling
CVSS 4.3
CVE-2022-25252 HIGH
PTC Axeda Agent and Desktop Server - Denial of Service via Exception Handling Failure
CVSS 7.5
CVE-2022-0016 HIGH
Palo Alto Networks GlobalProtect 5.2 < 5.2.9 - Local Privilege Escalation via Connect Before Logon
CVSS 7.4
CVE-2022-22290 MEDIUM
Samsung Internet <16.0.6.23 - Open Redirect
CVSS 6.5
CVE-2022-22265 MEDIUM KEV
NPU driver <SMR Jan-2022 Release 1 - Memory Corruption
CVSS 5.0
CVE-2021-3329 CRITICAL
Zephyrproject Zephyr Project Zephyr - Bluetooth Stack Crash via HCI Host Initialization
CVSS 9.6
CVE-2021-42205 MEDIUM
ELAN Miniport <24.21.51.2 - Use After Free
CVSS 4.7
Details
Vulnerabilities 154