Advisories · Weakness
CWE-755.
Every Advisory and CVE whose sources give the weakness CWE-755, newest first.
- CVSS 6.5 Medium
Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty
- CWE-20
- CWE-755
>=0.9.3, <0.9.5 · fixed in 0.9.5
GHSA-hp5x-rqf7-43vf · CVE-2020-5403 - CVSS 5.5 Medium
Improper handling of exceptional conditions in Intel(R) Trace Analyzer and Collector
- Intel(R) Trace Analyzer and Collector
- CWE-755
- CVSS 7.5 High
SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module
- ABB SPIET800
- ABB PNI800
- CWE-754
- CWE-755
-
Improper handling of exceptional conditions in kernel
- kernel
- CWE-755
-
Improper handling of exceptional conditions in BIG-IP AFM
- BIG-IP AFM
- CWE-755
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.5 High
Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets
- Juniper Networks Junos OS
- Denial of service
- CWE-755
- CVSS 7.5 High
Uncaught Exception in engine.io
- CWE-754
- CWE-755
>=4.0.0, <4.1.2 || >=5.0.0, <5.2.1 || >=6.0.0, <6.1.1 · fixed in 4.1.2, 5.2.1, 6.1.1
GHSA-273r-mgr4-v34f · CVE-2022-21676 - CVSS 7.5 High
Denial of Service in soketi
- CWE-755
<0.24.1 · fixed in 0.24.1
GHSA-86ch-6w7v-v6xf · CVE-2022-21667 - CVSS 4.3 Medium
Inline footnotes wrapped in <a> tags can cause errors in discourse-footnotes
- discourse-footnote
- CWE-755
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Improper handling of exceptional conditions in Google Chrome
- Google Chrome
- CWE-755
- CVSS 7.5 High
PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces
- Palo Alto Networks PAN-OS
- Palo Alto Networks Prisma Access
- CWE-755
-
Hanging RRDP request
- NLnet Labs Routinator
- CWE-755
- CVSS 7.5 High
CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service
- CODESYS V2
- CWE-755
- CVSS 5.3 Medium
Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated
- Juniper Networks Junos OS
- CWE-754
- CWE-755
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.5 High
Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet
- Juniper Networks Junos OS
- CWE-755
- CVSS 6.5 Medium
Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 4.4 Medium
Improper handling of exceptional conditions in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-755
- CVSS 4.4 Medium
Improper handling of exceptional conditions in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-755
- CVSS 7.5 High
AVEVA SuiteLink Server Improper Handling of Exceptional Conditions
- AVEVA Software, LLC AVEVA System Platform 2020
- AVEVA Software, LLC AVEVA InTouch 2020
- CWE-755
- CVSS 5.6 Medium
Exposure of Sensitive Information in keycloak
- Information disclosure
- CWE-755
<9.0.1 · fixed in 9.0.1
GHSA-4gf2-xv97-63m2 · CVE-2020-1744 - CVSS 7.5 High
PAN-OS: Exceptional Condition Denial-of-Service (DoS)
- Palo Alto Networks PAN-OS
- CWE-755
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in transpile
- Denial of service
- CWE-755
<=2.7.2 · no fixed version yet
GHSA-7xrj-f5rp-j55h · CVE-2021-23429 - CVSS 7.5 High
Parse Server crashes with query parameter
- Other injection
- CWE-20
<4.10.3 · fixed in 4.10.3
GHSA-xqp8-w826-hh6x · CVE-2021-39187 - CVSS 7.5 High
Improper Handling of Exceptional Conditions in detect-character-encoding
- CWE-755
<0.7.0 · fixed in 0.7.0
GHSA-jqfh-8hw5-fqjr · CVE-2021-39157 - CVSS 3.1 Low
Improper handling of exceptional conditions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- CWE-755
- CVSS 7.5 High
Improper Handling of Exceptional Conditions in Apache Tomcat
- CWE-755
>=10.0.3, <10.0.5 || >=9.0.0, <9.0.45 || <8.5.65 · fixed in 10.0.5, 9.0.45, 8.5.65
GHSA-44qp-qhfv-c7f6 · CVE-2021-30639 - CVSS 6.5 Medium
Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames
- Juniper Networks Junos OS
- CWE-755
- CVSS 8.0 High
Ory fosite contains Improper Handling of Exceptional Conditions
- CWE-754
- CWE-755
<0.34.0 · fixed in 0.34.0
GHSA-7mqr-2v3q-v2wm · CVE-2020-15223 - CVSS 2.5 Low
Segfault in `tf.raw_ops.SparseCountSparseOutput`
- CWE-755
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-wvjw-p9f5-vq28 · CVE-2021-29619 - CVSS 2.5 Low
Crash in `tf.transpose` with complex inputs
- CWE-755
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-xqfj-cr6q-pc8w · CVE-2021-29618 - CVSS 2.5 Low
Crash in `tf.strings.substr` due to `CHECK`-fail
- CWE-755
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-mmq6-q8r3-48fm · CVE-2021-29617 - CVSS 7.5 High
Authorization bypass in github.com/dgrijalva/jwt-go
- Authentication bypass
- CWE-755
>=0.0.0-20150717181359-44718f8a89b0, <=3.2.0 · no fixed version yet
GHSA-w73w-5m7g-f7qc · CVE-2020-26160 - CVSS 7.5 High
Improper handling of exceptional conditions in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- CWE-755
- CVSS 7.5 High
Improper exception handling in Aedes
- CWE-755
<0.42.1 · fixed in 0.42.1
GHSA-gh78-48h3-frjq · CVE-2020-13410 - CVSS 7.4 High
Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 5.5 Medium
Local Denial of Service in McAfee DLP Endpoint for Windows
- McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows
- CWE-755
- CVSS 7.5 High
Denial of Service (DoS) in restify-paginate
- CWE-755
<=0.0.5 · no fixed version yet
GHSA-qr9h-vr5p-pwwx · CVE-2020-27543 - CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
- Denial of service
- CWE-551
>=7.2.2, <9.4.39 || >=10.0.0, <10.0.2 || >=11.0.0, <11.0.2 · fixed in 9.4.39, 10.0.2, 11.0.2
GHSA-26vr-8j45-3r4w · CVE-2021-28165 - CVSS 7.5 High
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.
- CWE-755
- CVSS 5.5 Medium
Improper handling of exceptional conditions in Siemens LOGO! 12/24RCE and others
- Siemens LOGO! 12/24RCE
- Siemens LOGO! 12/24RCEo
- CWE-755
- CVSS 2.3 Low
Sensitive information via generation of error messages vulnerability in QES
- QNAP Systems Inc. QES
- Information disclosure
- CWE-755
- CVSS 5.5 Medium
Cortex XDR Agent: Exceptional condition denial-of-service (DoS)
- Palo Alto Networks Cortex XDR Agent
- CWE-755
- CVSS 6.5 Medium
Specific query can cause a DoS against MongoDB Server
- MongoDB Inc. MongoDB Server
- CWE-755
- CVSS 6.5 Medium
Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 2.3 Low
Improper handling of exceptional conditions in Dell CPG BIOS
- Dell CPG BIOS
- CWE-755
- CVSS 6.5 Medium
Specific GeoQuery can cause DoS against MongoDB Server
- MongoDB Inc. MongoDB Server
- CWE-755
- CVSS 5.5 Medium
Unhandled exception in apport
- Canonical apport
- CWE-755
- CVSS 5.5 Medium
Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured
- Juniper Networks Junos OS
- CWE-755
- CVSS 6.5 Medium
Denial of Service in Synergy
- symless synergy-core
- CWE-755
- CVSS 8.6 High
Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated…
- CWE-755
- CVSS 7.5 High
Improper handling of exceptional conditions in ceph
- ceph
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311…
- Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info)
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see…
- Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see…
- Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see…
- Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see…
- Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
- CWE-755
-
Improper handling of exceptional conditions in Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see…
- Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
- CWE-755