CWE-248.

HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service

• CWE-20
• CWE-248

<11.0.9 · fixed in 11.0.9

Multer vulnerable to Denial of Service via unhandled exception from malformed request

• CWE-248

>=1.4.4-lts.1, <2.0.2 · fixed in 2.0.2

Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests

• CWE-248

<1.13.0 · fixed in 1.13.0

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

• CWE-248

<1.9.4 · fixed in 1.9.4

MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service

• CWE-248

<1.10.0 · fixed in 1.10.0

AVEVA PI Data Archive Uncaught Exception

• AVEVA PI Data Archive
• AVEVA PI Server
• CWE-248

AVEVA PI Data Archive Uncaught Exception

• AVEVA PI Data Archive
• AVEVA PI Server
• CWE-248

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.

• Huawei HarmonyOS
• CWE-248

Multer vulnerable to Denial of Service via unhandled exception

• CWE-248

>=1.4.4-lts.1, <2.0.1 · fixed in 2.0.1

quic-go Has Panic in Path Probe Loss Recovery Handling

• CWE-248

>=0.50.0, <0.50.1 · fixed in 0.50.1

vLLM allows clients to crash the openai server with invalid regex

• CWE-248

>=0.8.0, <0.9.0 · fixed in 0.9.0

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

• CWE-248

>=0.8.0, <0.9.0 · fixed in 0.9.0

Multer vulnerable to Denial of Service from maliciously crafted requests

• CWE-248

>=1.4.4-lts.1, <2.0.0 · fixed in 2.0.0

node: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on…

• node
• CWE-248

Intel(R) Processors: Uncaught exception in the core management mechanism for some Intel(R) Processors may…

• Intel(R) Processors
• CWE-248

IBM Db2 denial of service

• IBM Db2 for Linux, UNIX and Windows
• CWE-248

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-248

tRPC 11 WebSocket DoS Vulnerability

• CWE-248
• CWE-460

>=11.0.0, <11.1.1 · fixed in 11.1.1

PeerTube User Import Authenticated Persistent Denial of Service

• CWE-248

XSS in iKSORIS

• SoftCOM iKSORIS
• CWE-248

SurrealDB has uncaught exception in Net module that leads to database crash

• CWE-248

<2.0.5 || >=2.1.0, <2.1.5 || >=2.2.0, <2.2.2 · fixed in 2.0.5, 2.1.5, 2.2.2

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

• Huawei HarmonyOS
• CWE-248

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

• Huawei HarmonyOS
• CWE-248

In wlan AP driver, there is a possible information disclosure due to an uncaught exception.

• MediaTek, Inc. MT7915, MT7916, MT7981, MT7986, MT7990, MT7992
• CWE-248

In wlan AP driver, there is a possible information disclosure due to an uncaught exception.

• MediaTek, Inc. MT7915, MT7916, MT7981, MT7986
• CWE-248

Malformed MongoDB wire protocol messages may cause mongos to crash

• MongoDB Inc MongoDB Server
• CWE-248

PyTorch Lightning denial of service vulnerability

• CWE-248

<=2.3.2 · no fixed version yet

Unhandled Exception in danny-avila/librechat

• danny-avila/librechat
• CWE-248

Denial of Service in danny-avila/librechat

• danny-avila/librechat
• CWE-248

Unauthenticated Denial of Service (DoS) in mintplex-labs/anything-llm

• mintplex-labs/anything-llm
• CWE-248

Formwork improperly validates input of User role preventing site and panel availability

• CWE-248
• CWE-1285

>=2.0.0-beta.1, <2.0.0-beta.4 · fixed in 2.0.0-beta.4

Namada-apps allows Post-Genesis Validator Bypass

• CWE-248

>=1.0.0, <1.1.0 · fixed in 1.1.0

Uncaught Panic in ORML Rewards Pallet

• CWE-248

<1.2.1 · fixed in 1.2.1

Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception

• Qardio Heart Health IOS Mobile Application
• Qardio Heart Health Android Mobile Application
• CWE-248

Intel(R) Server M50FCP Family and Intel(R) Server D50DNP…: Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R)…

• Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family
• CWE-248

IBM EntireX denial of service

• IBM EntireX
• CWE-248

Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader.

• 2N OS
• CWE-248

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…

• Cisco IOS
• Cisco IOS XE Software
• CWE-248

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…

• Cisco IOS
• Cisco IOS XE Software
• CWE-248

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…

• Cisco IOS
• Cisco IOS XR Software
• CWE-248

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…

• Cisco IOS
• Cisco IOS XE Software
• CWE-248

Go Ethereum vulnerable to DoS via malicious p2p message in github.com/ethereum/go-ethereum

• CWE-248

>=1.14.0, <1.14.13 · fixed in 1.14.13

In network HW, there is a possible system hang due to an uncaught exception.

• MediaTek, Inc. MT7981, MT7986
• CWE-248

Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exce…

• CWE-248

M-Files Server crash via EOT database driver configuration

• M-Files Corporation M-Files Server
• CWE-248

Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

• Huawei HarmonyOS
• CWE-248

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions.

• MediaTek, Inc. MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
• CWE-248

rustls network-reachable panic in `Acceptor::accept`

• CWE-248

>=0.23.13, <0.23.18 · fixed in 0.23.18

SurrealDB has an Uncaught Exception Sorting Tables by Random Order

• CWE-248

<2.1.0 · fixed in 2.1.0

SurrealDB has an Uncaught Exception Handling Nonexistent Role

• CWE-248

<2.1.0 · fixed in 2.1.0

SurrealDB has an Uncaught Exception in Function Generating Random Time

• CWE-248

<2.1.0 · fixed in 2.1.0

Intel(R) CST software: Uncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an…

• Intel(R) CST software
• CWE-248

Element allows a malicious homeserver can modify events leading to unrenderable events or rooms

• element-hq element-web
• CWE-248

Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.

• Huawei HarmonyOS
• CWE-248

SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

• CWE-248

>=2.0.0, <2.0.4 · fixed in 2.0.4

Denial of Service in TYPO3 Bookmark Toolbar

• CWE-248
• CWE-1286

>=10.0.0, <10.4.46 || >=11.0.0, <11.5.40 || >=12.0.0, <12.4.21 || >=13.0.0, <13.3.1 · fixed in 10.4.46, 11.5.40, 12.4.21, 13.3.1

Intel(R) RAID Web Console software: Uncaught exception in Intel(R) RAID Web Console software all versions may allow an…

• Intel(R) RAID Web Console software
• CWE-248

JavaScript specification issue may lead to type confusion and pointer dereference in implementations

• tc39 ecma262
• Memory corruption
• CWE-248

Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`

• CWE-248

>=0.16.0, <0.19.0 · fixed in 0.19.0

Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-248