Vulnerabilities > Improper Check for Unusual or Exceptional Conditions

DATE CVE VULNERABILITY TITLE RISK
2020-09-24 CVE-2020-3421 Improper Check for Unusual or Exceptional Conditions vulnerability in Cisco IOS XE 16.9.3/17.2
Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall.
network
low complexity
cisco CWE-754
7.5
2020-09-24 CVE-2020-15223 Improper Check for Unusual or Exceptional Conditions vulnerability in ORY Fosite
In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.34.0, the `TokenRevocationHandler` ignores errors coming from the storage.
network
high complexity
ory CWE-754
8.0
2020-09-16 CVE-2020-14348 Improper Check for Unusual or Exceptional Conditions vulnerability in Redhat AMQ Online
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.
network
low complexity
redhat CWE-754
4.3
2020-09-03 CVE-2020-5420 Improper Check for Unusual or Exceptional Conditions vulnerability in Cloudfoundry Cf-Deployment and Gorouter
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
network
low complexity
cloudfoundry CWE-754
7.7
2020-08-31 CVE-2020-25056 Improper Check for Unusual or Exceptional Conditions vulnerability in Google Android 10.0
An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software.
network
low complexity
google CWE-754
7.5
2020-08-26 CVE-2020-5925 Improper Check for Unusual or Exceptional Conditions vulnerability in F5 products
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel (TMM) to restart under some circumstances.
network
low complexity
f5 CWE-754
7.5
2020-08-17 CVE-2020-3449 Improper Check for Unusual or Exceptional Conditions vulnerability in Cisco IOS XR
A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent authorized users from monitoring the BGP status and cause the BGP process to stop processing new updates, resulting in a denial of service (DOS) condition.
network
low complexity
cisco CWE-754
4.3
2020-08-10 CVE-2020-15658 Improper Check for Unusual or Exceptional Conditions vulnerability in multiple products
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog.
network
low complexity
mozilla canonical CWE-754
6.5
2020-07-15 CVE-2020-15117 Improper Check for Unusual or Exceptional Conditions vulnerability in multiple products
In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB.
network
low complexity
symless fedoraproject CWE-754
6.5
2020-07-07 CVE-2020-15566 Improper Check for Unusual or Exceptional Conditions vulnerability in multiple products
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation.
local
low complexity
xen debian CWE-754
6.5