Advisories · Weakness
CWE-248.
Every Advisory and CVE whose sources give the weakness CWE-248, newest first.
-
Linux kernel: There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the…
- Linux kernel
- CWE-248
- CVSS 5.3 Medium
Unexpected server crash in Next.js
- CWE-248
- CWE-754
>=12.2.3, <12.2.4 · fixed in 12.2.4
GHSA-wff4-fpwg-qqv3 · CVE-2022-36046 - CVSS 8.7 High
PocketMine-MP invalid skin geometry JSON data leading to server crash
- CWE-248
<4.7.2 · fixed in 4.7.2
GHSA-8cwq-4cmf-px73 · CVE-2022-51009 - CVSS 6.5 Medium
Uncaught Exception (due to a data race) leads to process termination in Waitress
- Race condition
- CWE-248
>=2.1.0, <2.1.2 · fixed in 2.1.2
GHSA-f5x9-8jwc-25rw · CVE-2022-31015 - CVSS 4.3 Medium
Camaleon CMS vulnerable to Uncaught Exception
- CWE-248
>=2.0.1, <2.6.0.1 · fixed in 2.6.0.1
GHSA-r2w2-h6r8-3r53 · CVE-2021-25971 - CVSS 7.5 High
Crash in HeaderParser in dicer
- CWE-248
<=0.3.0 · no fixed version yet
GHSA-wm7h-9275-46v2 · CVE-2022-24434 - CVSS 5.9 Medium
Undertow Uncaught Exception vulnerability
- CWE-248
>=1.4.0, <1.4.3.Final || <1.3.25.Final · fixed in 1.4.3.Final, 1.3.25.Final
GHSA-3f57-w2rp-72fc · CVE-2016-7046 - CVSS 7.5 High
Crash when decoding malformed HTTP requests or malformed JSON payload
- CWE-248
>=1.4.0, <1.6.0 · fixed in 1.6.0
GHSA-95q3-pppp-r683 · CVE-2018-1330 -
Siemens Desigo DXR2: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)…
- Siemens Desigo DXR2
- Siemens Desigo PXC3
- CWE-248
- CVSS 7.5 High
Uncaught Exception in bignum
- CWE-248
<=0.13.1 · no fixed version yet
GHSA-6429-3g3w-6mw5 · CVE-2022-25324 - CVSS 7.5 High
Denial-of-Service when binding invalid parameters in sqlite3
- CWE-248
>=5.0.0, <5.0.3 · fixed in 5.0.3
GHSA-9qrh-qjmc-5w2p · CVE-2022-21227 - CVSS 7.4 High
Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability
- Cisco IOS
- CWE-248
- CVSS 7.5 High
Denial of Service vulnerability in @podium/layout and @podium/proxy
- CWE-248
<4.6.110 · fixed in 4.6.110
GHSA-3hjg-vc7r-rcrw · CVE-2022-24822 - CVSS 5.3 Medium
Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-248
- CVSS 7.5 High
AVEVA System Platform Uncaught Exception
- AVEVA System Platform
- CWE-248
- CVSS 5.5 Medium
Uncaught Exception in zip4j
- CWE-248
- CWE-755
<2.10.0 · fixed in 2.10.0
GHSA-q62h-jw38-24vh · CVE-2022-24615 - CVSS 7.1 High
Unhandled exception when decoding form response JSON
- CWE-248
>=4.0.0, <4.0.7 · fixed in 4.0.7
GHSA-wjfq-88q2-r34j · CVE-2022-51014 - CVSS 8.8 High
DOS and Open Redirect with user input
- Denial of service
- Open redirect
>=4.2.4, <4.4.1 · fixed in 4.4.1
GHSA-pgh6-m65r-2rhq · CVE-2021-22964 -
Denial of Service in node-static
- Denial of service
- CWE-248
<=0.7.11 · no fixed version yet
GHSA-8r4g-cg4m-x23c -
Duplicate Advisory: Uncaught Exception in libpulse-binding
- CWE-248
<2.6.0 · fixed in 2.6.0
GHSA-wcxc-jf6c-8rx9 · CVE-2019-25055 - CVSS 7.5 High
Uncaught Exception in jsoup
- Denial of service
- CWE-248
<1.14.2 · fixed in 1.14.2
GHSA-m72m-mhq2-9p6c · CVE-2021-37714 - CVSS 6.5 Medium
Akaunting DoS via User-Controlled 'locale' Variable
- Akaunting
- CWE-248
- CVSS 4.1 Medium
Malicious Android application can crash the Nextcloud Android Client
- nextcloud security-advisories
- CWE-248
- CVSS 7.5 High
Uncaught Exception leading to Denial of Service in json-sanitizer
- CWE-248
<1.2.2 · fixed in 1.2.2
GHSA-8rf5-92jh-3vc9 · CVE-2021-23900 - CVSS 5.5 Medium
GlobalProtect App: Windows VPN kernel driver denial of service (DoS)
- Palo Alto Networks GlobalProtect App
- CWE-20
- CWE-248
-
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl.
- Siemens SIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
- Siemens SIMATIC S7-1500 Software Controller
- CWE-248
-
Game Networking Sockets: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined…
- Game Networking Sockets
- CWE-248
- CVSS 4.3 Medium
Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
- Cisco Unified Communications Manager IM and Presence Service
- CWE-248
- CVSS 8.2 High
Service DoS through arbitrary pointer dereferencing on KUKA simulator
- KUKA Roboter GmbH Visual Components Network License Server 2.0.8
- CWE-248
-
AMQ: It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's…
- AMQ
- CWE-248
-
Denial of Service in sequelize
- CWE-248
<4.44.4 · fixed in 4.44.4
GHSA-fw4p-36j9-rrj3 - CVSS 7.5 High
Denial of Service in mqtt
- CWE-248
<1.0.0 · fixed in 1.0.0
GHSA-hg78-c92r-hvwr · CVE-2016-1000242 -
OSIsoft PI System multiple products and versions: In OSIsoft PI System multiple products and versions, a remote…
- OSIsoft PI System multiple products and versions
- CWE-248
-
SonicWall SMA1000: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated…
- SonicWall SMA1000
- CWE-248
-
Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior…
- Schneider Electric SE Modicon M580
- Schneider Electric SE Modicon M340
- CWE-248
-
Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions…
- Schneider Electric SE Modicon M580
- Schneider Electric SE Modicon M340
- CWE-248
- CVSS 7.5 High
Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version…
- Schneider Electric SE Modicon M580
- Schneider Electric SE Modicon M340
- CWE-248
-
Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to…
- Schneider Electric SE Modicon M580
- CWE-248
-
Siemens AG All other SIPROTEC 5 device types with CPU…: A vulnerability has been identified in All other SIPROTEC 5 device types with CPU…
- Siemens AG All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules
- Siemens AG DIGSI 5 engineering software
- CWE-248
- CVSS 7.5 High
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private…
- Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
- CWE-248
-
Siemens AG SIMATIC PCS 7 V8.0 and earlier: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- CWE-248
- CVSS 7.5 High
Siemens SIMATIC CP 443-1 OPC UA: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions)…
- Siemens SIMATIC CP 443-1 OPC UA
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-248
-
SonicWall SonicOS: A vulnerability in SonicWall SonicOS and SonicOSv…
- SonicWall SonicOS
- SonicWall SonicOSv
- CWE-248
-
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…
- Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CWE-248
-
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…
- Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CWE-248
-
A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3).
- Siemens AG SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CWE-248
-
Elastic Logstash: Logstash versions prior to 2.3.3, when using the Netflow Codec plugin…
- Elastic Logstash
- CWE-248