Vulnerabilities > Improper Handling of Exceptional Conditions

DATE CVE VULNERABILITY TITLE RISK
2021-04-09 CVE-2021-25365 Improper Handling of Exceptional Conditions vulnerability in Google Android
An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd.
local
low complexity
google CWE-755
7.8
2021-04-07 CVE-2020-11243 Improper Handling of Exceptional Conditions vulnerability in Qualcomm products
RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
network
low complexity
qualcomm CWE-755
7.5
2021-04-06 CVE-2021-30046 Improper Handling of Exceptional Conditions vulnerability in Vigra Computer Vision Library Project Vigra Computer Vision Library 1.11.1
VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in which a crafted file can cause a denial of service.
6.5
2021-04-01 CVE-2021-28165 Improper Handling of Exceptional Conditions vulnerability in multiple products
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
network
low complexity
eclipse oracle jenkins netapp CWE-755
7.5
2021-03-24 CVE-2021-1356 Improper Handling of Exceptional Conditions vulnerability in Cisco IOS XE
Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-755
4.3
2021-03-22 CVE-2021-28971 Improper Handling of Exceptional Conditions vulnerability in multiple products
In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.
local
low complexity
linux fedoraproject debian netapp CWE-755
5.5
2021-03-19 CVE-2021-28831 Improper Handling of Exceptional Conditions vulnerability in multiple products
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.
network
low complexity
busybox fedoraproject debian CWE-755
7.5
2021-03-16 CVE-2021-3127 Improper Handling of Exceptional Conditions vulnerability in Nats JWT Library and Nats Server
NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.
network
low complexity
nats CWE-755
7.5
2021-02-25 CVE-2020-27543 Improper Handling of Exceptional Conditions vulnerability in Restify-Paginate Project Restify-Paginate 0.0.5
The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header.
network
low complexity
restify-paginate-project CWE-755
7.5
2021-02-09 CVE-2020-26195 Improper Handling of Exceptional Conditions vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user.
network
low complexity
dell CWE-755
5.3