CWE-755

Medium likelihood

Improper Handling of Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

583 vulnerabilities with CWE-755
CVE-2021-0005 MEDIUM
Intel Ethernet Controller E810 Firmware < 1.5.3.0 - Denial of Service via Uncaught Exception
CVSS 4.4
CVE-2021-0003 MEDIUM
Intel Ethernet Controller E810 Firmware < 1.4.11 - Authenticated Information Disclosure via Improper Exception Handling
CVSS 5.5
CVE-2021-38384 CRITICAL
Serverless Offline 8.0.0 - Info Disclosure
CVSS 9.8
CVE-2021-22922 MEDIUM
curl 7.27.0-7.77.0 - Unauthenticated Malicious Content Retention via Metalink Hash Mismatch
CVSS 6.5
CVE-2021-33486 HIGH
CODESYS V3 Runtime Toolkit for VxWorks <V3.5.17.10 - Memory Corruption
CVSS 7.5
CVE-2021-32066 HIGH
Ruby < 2.6.7, 2.7.x < 2.7.3, 3.x < 3.0.1 - TLS Protection Bypass via StartTLS Stripping
CVSS 7.4
CVE-2021-1102 MEDIUM
NVIDIA vGPU <12.3, <11.5, <8.8 - Memory Corruption
CVSS 5.5
CVE-2021-0290 MEDIUM
Juniper Junos OS 16.1-19.3 - Denial of Service via Ethernet Frame Processing
CVSS 6.5
CVE-2021-30639 HIGH
Apache Tomcat 10.0.3-10.0.4, 9.0.44, 8.5.64 - Denial of Service via Non-Blocking I/O Error Flag
CVSS 7.5
CVE-2021-33795 MEDIUM
Foxit Reader and PhantomPDF < 10.1.4 - Incorrect PDF Document Signature Handling
CVSS 5.5
CVE-2021-36128 CRITICAL
MediaWiki < 1.36 - Improper Handling of Exceptional Conditions in CentralAuth Autoblocks
CVSS 9.8
CVE-2021-27042 HIGH
Autodesk Advance Steel 2019-<2019.1.3 - Remote Code Execution via Malicious DWG File
CVSS 7.8
CVE-2021-0478 HIGH
Android - Local Privilege Escalation via StatusBarIconView Exception Handling
CVSS 7.8
CVE-2021-21439 MEDIUM
OTRS 6.0.1-6.0.29 and 7.0.0-7.0.26 - Denial of Service via Malicious Email URL
CVSS 6.5
CVE-2021-31701 HIGH
mintty < 3.4.7 - Denial of Service via Bracketed Paste Mode
CVSS 7.5
CVE-2021-33477 HIGH
rxvt-unicode <9.22, rxvt <2.7.10, mrxvt <0.5.4, Eterm <0.9.7 - RCE
CVSS 8.8
CVE-2021-29619 LOW
TensorFlow < 2.1.4 - Denial of Service via Invalid Arguments to tf.raw_ops.SparseCountSparseOutput
CVSS 2.5
CVE-2021-29618 LOW
TensorFlow < 2.1.4 - Denial of Service via tf.transpose with Complex Argument
CVSS 2.5
CVE-2021-29617 LOW
TensorFlow < 2.1.4 - Denial of Service via Invalid Arguments in tf.strings.substr
CVSS 2.5
CVE-2021-25662 HIGH
SIMATIC WinCC Runtime Advanced < 16 - Denial of Service via SmartVNC Client Exception Handling
CVSS 7.5
CVE-2021-1495 MEDIUM
Cisco Firepower Threat Defense < 6.4.0.12 - Unauthenticated File Policy Bypass via HTTP Header Handling
CVSS 5.8
CVE-2021-0264 MEDIUM
Juniper Junos OS 19.3-20.4 and Junos OS Evolved - Denial of Service via Firewall Filter Syslog Action
CVSS 5.9
CVE-2021-0259 HIGH
Juniper Networks Junos OS/Junos OS Evolved - DoS
CVSS 7.4
CVE-2021-0241 HIGH
Juniper Junos OS - Denial of Service via Malformed DHCPv6 Packet
CVSS 7.4
CVE-2021-0240 HIGH
Juniper Junos OS - Denial of Service via Malformed DHCPv6 Packet
CVSS 7.4
Details
Vulnerabilities 583
Exploit Likelihood Medium