CWE-703
Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
154 vulnerabilities with CWE-703
CVE-2023-28959
MEDIUM
Juniper Junos OS QFX10002 DoS via Malformed Packet
CVSS 6.5
CVE-2023-29194
MEDIUM
Vitess < 16.0.1 - Denial of Service via Keyspace Name with Forward Slash
CVSS 4.1
CVE-2023-0004
MEDIUM
Palo Alto Networks PAN-OS - Privilege Escalation
CVSS 6.5
CVE-2023-21036
MEDIUM
Android - Improper Image Truncation in BitmapExport.java
CVSS 5.5
CVE-2023-21026
MEDIUM
Android 13 - Denial of Service via WindowManagerService Input Channel Logic Error
CVSS 5.5
CVE-2023-0397
CRITICAL
Zephyr < 3.2.0 - Denial of Service via Bluetooth LE Buffer Size Input
CVSS 9.6
CVE-2023-22413
HIGH
Juniper Junos < 19.4 - Unauthenticated Denial of Service via IPsec Library Exception Handling
CVSS 7.5
CVE-2022-34472
MEDIUM
Firefox <102, Thunderbird <91.11 - Info Disclosure
CVSS 4.3
CVE-2022-39911
MEDIUM
Samsung Pass <4.0.06.1 - Info Disclosure
CVSS 4.8
CVE-2022-41777
HIGH
nadesiko3 < 3.3.74 - Denial of Service via Invalid decodeURIComponent Input
CVSS 7.5
CVE-2022-20924
HIGH
Cisco Adaptive Security Appliance Software - Authenticated Denial of Service via SNMP Request
CVSS 7.7
CVE-2022-22224
MEDIUM
Juniper Networks Junos OS/Junos OS Evolved - DoS
CVSS 6.5
CVE-2022-41589
HIGH
Huawei EMUI - Denial of Service via DFX Unwind Stack Module
CVSS 7.5
CVE-2022-31152
MEDIUM
Synapse < 1.62.0 - Event Authorization Rule Bypass via Exceptional Condition Handling
CVSS 6.4
CVE-2022-23004
MEDIUM
Western Digital Sweet B - Denial of Service via P-256 Curve Point Multiplication
CVSS 5.3
CVE-2022-23003
MEDIUM
Western Digital Sweet B - Incorrect Calculation in NIST P-256 Curve Operations
CVSS 5.3
CVE-2022-23002
MEDIUM
Western Digital Sweet B - Denial of Service via P-256 Elliptic Curve Point Compression/Decompression
CVSS 5.3
CVE-2022-30738
MEDIUM
Samsung Internet < 17.0.1.69 - Address Bar Spoofing via Loader Script Execution
CVSS 4.3
CVE-2022-27841
MEDIUM
Samsung Pass < 3.7.07.5 - Unauthenticated Screen Exposure via Improper Exception Handling
CVSS 4.3
CVE-2022-25252
HIGH
PTC Axeda Agent and Desktop Server - Denial of Service via Exception Handling Failure
CVSS 7.5
CVE-2022-0016
HIGH
Palo Alto Networks GlobalProtect 5.2 < 5.2.9 - Local Privilege Escalation via Connect Before Logon
CVSS 7.4
CVE-2022-22290
MEDIUM
Samsung Internet <16.0.6.23 - Open Redirect
CVSS 6.5
CVE-2022-22265
MEDIUM
KEV
NPU driver <SMR Jan-2022 Release 1 - Memory Corruption
CVSS 5.0
CVE-2021-3329
CRITICAL
Zephyrproject Zephyr Project Zephyr - Bluetooth Stack Crash via HCI Host Initialization
CVSS 9.6
CVE-2021-42205
MEDIUM
ELAN Miniport <24.21.51.2 - Use After Free
CVSS 4.7
Details
Vulnerabilities
154