Advisories · Weakness
CWE-755.
Every Advisory and CVE whose sources give the weakness CWE-755, newest first.
- CVSS 4.3 Medium
BIG-IP and BIG-IQ iControl SOAP vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- CWE-755
- CVSS 7.5 High
Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface
- Juniper Networks Junos OS
- CWE-755
-
Improper handling of exceptional conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-755
- CVSS 7.5 High
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
- Arista Networks Arista EOS
- CWE-755
- CVSS 5.3 Medium
Improper random reading in CIRCL
- CWE-20
- CWE-755
<1.3.3 · fixed in 1.3.3
GHSA-2q89-485c-9j2x · CVE-2023-1732 - CVSS 4.3 Medium
XWiki Platform vulnerable to page render failure due to broken translations
- CWE-248
- CWE-755
>=4.3-milestone-2, <13.10.11 || >=14.0-rc-1, <14.4.8 || >=14.5, <14.10.1 · fixed in 13.10.11, 14.4.8, 14.10.1
GHSA-9jq5-xwqw-q8j3 · CVE-2023-29520 - CVSS 7.5 High
An issue was discovered in ONOS 2.5.1.
- CWE-755
- CVSS 5.3 Medium
Comrak AST node data is not validated (GHSL-2023-049)
- CWE-755
<0.17.0 · fixed in 0.17.0
GHSA-5r3x-p7xx-x6q5 · CVE-2023-28631 - CVSS 7.8 High
A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user ope…
- CWE-755
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper handling of exceptional conditions in Netatalk
- Netatalk
- CWE-755
- CVSS 7.8 High
Improper handling of exceptional conditions in Android
- Android
- CWE-755
- CVSS 4.8 Medium
`cilium-cli` disables etcd authorization for clustermesh clusters
- CWE-280
- CWE-755
<0.13.2 · fixed in 0.13.2
GHSA-6f27-3p6c-p5jc · CVE-2023-28114 - CVSS 6.5 Medium
Cilium eBPF filters may be temporarily removed during agent restart
- CWE-755
>=1.13.0, <1.13.1 · fixed in 1.13.1
GHSA-r5x6-w42p-jhpp · CVE-2023-27595 - CVSS 5.5 Medium
obs-service-go_modules: arbitrary directory delete
- openSUSE Factory
- CWE-755
- CVSS 6.5 Medium
xwiki vulnerable to Improper Handling of Exceptional Conditions
- CWE-755
>=6.0, <13.10.10 || >=14.0, <14.4.6 || >=14.5, <14.9-rc-1 · fixed in 13.10.10, 14.4.6, 14.9-rc-1
GHSA-52vf-hvv3-98h7 · CVE-2023-26479 - CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Remote Code Execution on COSLAT Firewall
- BG-TEK COSLAT Firewall
- CWE-755
- CVSS 9.8 CriticalCritical · CVSS 9+
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/L…
- CWE-755
- CVSS 5.7 Medium
Login fail open on JAAS misconfiguration in DataHub
- datahub
- CWE-755
- CVSS 6.7 Medium
Improper handling of exceptional conditions in MediaTek, Inc. MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663…
- MediaTek, Inc. MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788
- CWE-755
- CVSS 5.3 Medium
wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
- wireapp wire-webapp
- CWE-755
- CVSS 7.5 High
Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)
- Juniper Networks Junos OS
- CWE-755
- CVSS 6.7 Medium
Improper handling of exceptional conditions in MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916…
- MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532
- CWE-755
- CVSS 6.7 Medium
Improper handling of exceptional conditions in MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916…
- MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986
- CWE-755
- CVSS 6.7 Medium
Improper handling of exceptional conditions in MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916…
- MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986
- CWE-755
- CVSS 6.5 Medium
Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme.
- CWE-755
- CVSS 7.5 High
Panic in github.com/ipfs/go-merkledag
- CWE-755
>=0.4.0, <0.8.1 · fixed in 0.8.1
GHSA-x39j-h85h-3f46 · CVE-2022-23495 - CVSS 8.6 High
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.
- CWE-755
- CVSS 5.5 Medium
Improper handling of exceptional conditions in Android
- Android
- CWE-755
- CVSS 7.5 High
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
- CWE-755
>=7.0.0, <7.9.0 · fixed in 7.9.0
GHSA-c4pm-63cg-9j7h · CVE-2022-23496 - CVSS 7.5 High
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks.
- CWE-755
- CVSS 5.3 Medium
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
- CWE-703
- CWE-755
<3.3.75 · fixed in 3.3.75
GHSA-x2jx-w3wm-9p3p · CVE-2022-41777 - CVSS 7.8 High
Improper handling of exceptional conditions in Trend Micro, Inc. Trend Micro Apex One
- Trend Micro, Inc. Trend Micro Apex One
- CWE-755
- CVSS 6.0 Medium
Improper handling of exceptional conditions in Intel(R) Server Board M50CYP Family
- Intel(R) Server Board M50CYP Family
- CWE-755
- CVSS 5.5 Medium
Improper handling of exceptional conditions in Android
- Android
- CWE-755
- CVSS 2.7 Low
Improper handling of exceptional conditions in GitLab
- GitLab
- CWE-755
- CVSS 7.5 High
Traefik HTTP/2 connections management could cause a denial of service
- Denial of service
- CWE-755
<2.8.8 || >=2.9.0-rc1, <2.9.0-rc5 · fixed in 2.8.8, 2.9.0-rc5
GHSA-c6hx-pjc3-7fqr · CVE-2022-39271 - CVSS 7.7 High
Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability
- Cisco IOS
- CWE-755
- CVSS 5.3 Medium
rdiffweb Missing Custom Error Page
- CWE-755
- CWE-756
>=2.4.1, <2.4.2 · fixed in 2.4.2
GHSA-ch4c-278q-5654 · CVE-2022-3175 -
Improper handling of exceptional conditions in SAP SE SAP Host Agent (SAPOSCOL)
- SAP SE SAP Host Agent (SAPOSCOL)
- CWE-755
- CVSS 7.5 High
sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connections.
- CWE-755
- CVSS 6.4 Medium
Denial of service due to incorrect application of event authorization rules
- CWE-703
- CWE-755
<1.62.0rc1 · fixed in 1.62.0rc1
GHSA-jhjh-776m-4765 · CVE-2022-31152 - CVSS 6.5 Medium
Directus vulnerable to unhandled exception on illegal filename_disk value
- CWE-755
<9.15.0 · fixed in 9.15.0
GHSA-77qm-wvqq-fg79 · CVE-2022-36031 - CVSS 6.5 Medium
Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.5 High
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.
- CWE-755
- CVSS 8.1 High
CODESYS runtime system prone to file deletion due to improper error handling
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-755
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Improper Handling of Exceptional Conditions in Newtonsoft.Json
- CWE-755
<13.0.1 · fixed in 13.0.1
GHSA-5crp-9r3c-p9vr · CVE-2024-21907 -
Improper handling of exceptional conditions in SAP SE CLA Assistant
- SAP SE CLA Assistant
- CWE-755
- CVSS 9.8 CriticalCritical · CVSS 9+
Denial of service in bottle
- CWE-755
<0.12.20 · fixed in 0.12.20
GHSA-xhp9-4947-rq78 · CVE-2022-31799 - CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Improper Handling of Exceptional Conditions in Apache Tomcat
- CWE-755
>=9.0.0.M1, <9.0.0.M21 || >=8.5.0, <8.5.15 || >=8.0.0, <8.0.44 || >=7.0.0, <7.0.78 · fixed in 9.0.0.M21, 8.5.15, 8.0.44, 7.0.78
GHSA-jmvv-524f-hj5j · CVE-2017-5664 - CVSS 7.5 High
XMLTooling Library Incorrectly Handles Some Exceptions
- CWE-755
<3.0.4 · fixed in 3.0.4
GHSA-6hvf-xvwm-vrw4 · CVE-2019-9628 - CVSS 7.8 High
Improper handling of exceptional conditions in Intel(R) Processors
- Intel(R) Processors
- CWE-755
- CVSS 7.5 High
simpleSAMLphp incorrectly handles XML encryption
- CWE-755
<1.8.1 · fixed in 1.8.1
GHSA-5fj7-f8x3-q2mc · CVE-2011-4625 - CVSS 9.3 CriticalCritical · CVSS 9+
Improper handling of exceptional conditions in Gerbv and others
- Gerbv
- Gerbv forked
- CWE-755
- CVSS 5.9 Medium
PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy
- Palo Alto Networks PAN-OS
- Palo Alto Networks Prisma Access
- CWE-755
- CVSS 7.5 High
Improper handling of exceptional conditions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- CWE-755
-
Improper handling of exceptional conditions in darkhttpd
- darkhttpd
- CWE-755
- CVSS 6.5 Medium
DoS vulnerability: Malformed Resource Identifiers
- wireapp wire-ios
- CWE-755
- CVSS 5.5 Medium
Improper Handling of Exceptional Conditions inn metadata-extractor
- CWE-755
<2.18.0 · fixed in 2.18.0
GHSA-p5pg-wm9q-8v6r · CVE-2022-24613 - CVSS 5.5 Medium
Uncaught Exception in zip4j
- CWE-248
- CWE-755
<2.10.0 · fixed in 2.10.0
GHSA-q62h-jw38-24vh · CVE-2022-24615 - CVSS 7.5 High
Improper Input Validation and Excessive Iteration in Go Facebook Thrift
- Denial of service
- CWE-20
<0.31.1-0.20190225164308-c461c1bd1a3e · fixed in 0.31.1-0.20190225164308-c461c1bd1a3e
GHSA-x4rg-4545-4w7w · CVE-2019-3564