CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

powerdns-recursor -- denial of service

PowerDNS Team reports: PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation...

The vulnerabilities of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules allow a intruder to cause service failures.

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 stations is related to an exception handling error. Exploiting this vulnerability could allow a perpetrator to cause service failures by installing a key derived from PBKDF2...

The vulnerability of the BACnet protocol implementation in the micro-programming software for Desigo DXR2, PXC3, PXC4, and PXC5 modules allows a intruder to trigger a service failure.

The vulnerability of the BACnet protocol implementation in the micro-programming software for Desigo DXR2, PXC3, PXC4, and PXC5 modules is related to an exception handling error. Exploiting this vulnerability can allow attackers to cause service failures...

Design/Logic Flaw

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The...

Improper Handling of Exceptional Conditions in Newtonsoft.Json

Newtonsoft.Json prior to version 13.0.1 is vulnerable to Insecure Defaults due to improper handling of expressions with high nesting level that lead to StackOverFlow exception or high CPU and RAM usage. Exploiting this vulnerability results in Denial Of Service DoS. The serialization and...

TYPO3 Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-002)

TYPO3 is prone to an information disclosure vulnerability via exception handling/logger. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-002...

TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-002...

SUSE-SU-2022:2015-1 Security update for gcc48

This update for gcc48 fixes the following issues: - CVE-2019-14250: Fixed an integer overflow that could lead to an invalid memory access bsc1142649. Non-security fixes: - Fixed an issue with manual page builds bsc1185395. - Fixed an issue with static initializers bsc1177947. - Fixed an issue wit...

GHSA-F4G4-CJ8F-3CR9 OpenStack Nova logs sensitive context from notification exceptions

An issue was discovered in exceptionwrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens...

GHSA-6HVF-XVWM-VRW4 XMLTooling Library Incorrectly Handles Some Exceptions

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected...

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in the Palo Alto Networks PAN-OS software that originates from improper exception handling in the DNS proxy function...

The vulnerabilities in the implementation of the TCP/IP protocol stack of Cisco Email Security Appliance, Cisco Web Security Appliance web servers, and Cisco Secure Email and Web Manager (formerly known as Cisco Security Management Appliance) allow attackers to induce service interruptions.

The vulnerability of the TCP/IP protocol stack implementation of Cisco Email Security Appliance, Cisco Web Security Appliance, and Cisco Secure Email and Web Manager formerly Cisco Security Management Appliance is related to an exception handling error. Exploitation of this vulnerability could...

CVE-2022-27841

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...

CVE-2022-27841

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...

CVE-2022-27841

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...

CVE-2022-27841

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...

PUB-A-216607118

In exception handling functions of multiple files, there is a possible info leak due to side channel information disclosure. This could lead to local information disclosure from the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...