CWE-755

Medium likelihood

Improper Handling of Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

572 vulnerabilities with CWE-755
CVE-2024-21610 MEDIUM
Juniper Junos < 20.4R3-S9, 21.2-21.3R3-S5, 21.4-22.4R3, 23.2-23.2R2 - Authenticated DoS via CoS Daemon
CVSS 4.3
CVE-2024-32001 LOW
SpiceDB < 1.30.1 - Incorrect Authorization Decision via LookupSubjects Schema Handling
CVSS 2.2
CVE-2024-29748 HIGH KEV
Android < 2024-04-05 - Local Privilege Escalation via Logic Error
CVSS 7.8
CVE-2024-27662 MEDIUM
D-Link DIR-823G A1V1.0.2B05 - Denial of Service via Null-Pointer Dereference in sub_4110f4()
CVSS 6.5
CVE-2024-26584 MEDIUM
Linux Kernel 4.16.0-6.1.83, 5.16.0-6.1.83, 6.2.0-6.6.17, 6.7.0-6.7.5 - Denial of Service via TLS Crypto Request Backlog
CVSS 5.5
CVE-2024-23325 HIGH
Envoy 1.26.0-1.26.6 - Denial of Service via Proxy Protocol IPv6 Address Handling
CVSS 7.5
CVE-2024-21587 MEDIUM
Juniper Junos OS on MX Series DoS via DHCP Subscriber Session Flapping
CVSS 6.5
CVE-2024-21585 MEDIUM
Juniper Junos OS and Junos OS Evolved - Unauthenticated Denial of Service via BGP Session Flapping
CVSS 5.9
CVE-2024-20699 MEDIUM
Windows 10/11, Server 2019/2022 Hyper-V DoS
CVSS 5.5
CVE-2024-21907 HIGH
Newtonsoft.Json < 13.0.1 - Denial of Service via JsonConvert.DeserializeObject
CVSS 7.5
CVE-2023-43686 MEDIUM
Malwarebytes 4.x-5.x and Nebula 2020-10-21 and later - Denial of Service via Firefox Preference File Parser
CVSS 6.2
CVE-2023-46297 MEDIUM
Mercusys MW325R EU V3 <1.11.0 - DoS
CVSS 5.1
CVE-2023-50212 MEDIUM
D-Link G416 Firmware < 1.09b01 - Unauthenticated Information Disclosure via HTTP Service
CVSS 6.5
CVE-2023-42509 MEDIUM
JFrog Artifactory 7.17.4-7.77.0 - Sensitive Data Exposure via Repository Configuration Initialization
CVSS 6.6
CVE-2023-4537 HIGH
Comarch ERP XL <2023.2 - Info Disclosure
CVSS 7.4
CVE-2023-25543 HIGH
Dell Power Manager < 3.14 - Privilege Escalation via DPM Service
CVSS 7.8
CVE-2023-6267 HIGH
Quarkus < 2.13.9 - Unauthenticated JSON Payload Deserialization
CVSS 8.6
CVE-2023-34348 HIGH
AVEVA PI Server 2023 and 2018 SP3 P05 and prior - Unauthenticated Denial of Service
CVSS 7.5
CVE-2023-36842 MEDIUM
Juniper Junos OS Multiple Versions - Unauthenticated DoS via DHCP Packet
CVSS 6.5
CVE-2023-50019 MEDIUM
open5gs v2.6.6 - Denial of Service via Nudm_UECM_Registration Response Error Handling
CVSS 5.9
CVE-2023-52075 HIGH
ReVanced API <71f81f7f20cd26fd707335bca9838fa3e7df20d2 - DoS
CVSS 7.5
CVE-2023-6866 HIGH
Firefox < 121.0 - Denial of Service via TypedArray Exception Handling
CVSS 8.8
CVE-2023-50728 MEDIUM
octokit/webhooks 9.26.0-9.26.2 - Denial of Service via Uncaught Exception
CVSS 5.4
CVE-2023-41151 HIGH
Softing OPC UA C++ SDK <6.30 - Info Disclosure
CVSS 7.5
CVE-2023-25644 MEDIUM
ZTE MC801A and MC801A1 Firmware - Denial of Service via Web Interface Parameter
CVSS 6.5
Details
Vulnerabilities 572
Exploit Likelihood Medium