The vulnerability of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) system, related to an exception handling error, allows a violator to trigger a service failure.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P system is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

CVE-2020-6019

Valve's Game Networking Sockets/Steam Sockets before v1.2.0 contains a vulnerability in CConnectionTransportUDPBase::Received_Data() where inlined statistics messages trigger a libprotobuf exception, causing a crash. Affected component appears in both Steam server and client code paths per multip...

CVE-2020-5387

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed...

PT-2020-18447 · Dell · Dell Xps 13 9370 Bios

Name of the Vulnerable Software and Affected Versions: Dell XPS 13 9370 BIOS versions prior to 1.13.1 Description: The issue is related to improper exception handling. A local attacker with physical access could exploit this to prevent the system from booting until the exploited boot device is...

CVE-2020-5387

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed...

The vulnerability of the Linux operating system’s kernel Ethernet driver allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux operating system’s kernel Ethernet driver is related to improper exception handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-3945

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory disclosure flaw in the Linux kernel's ethernet drivers. It is caused by improper handling of exceptions, which can lead to the disclosure of...

Noise-Java AESGCMFallbackCipherState.encryptWithAd() Insufficient Boundary Checks Exploit

Noise-Java suffers from an issue located in the AESGCMFallbackCipherState.encryptWithAd method defined in AESGCMFallbackCipherState.java, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation. However, some checks...

CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13467

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

Memory corruption

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

Memory corruption

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13467

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13463

CVE-2020-13463 affects Apex Microelectronics APM32F103 devices, describing a flaw in the flash memory readout protection that can allow physical attackers to extract firmware via the debug interface and exception handling. The NVD metrics show CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score...

CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13410

The CVE-2020-13410 issue affects MoscaJS Aedes 0.42.0, where lib/write.js does not properly handle exceptions when writing an invalid packet to a stream. This detail appears consistently across multiple sources (Red Hat advisory, CVE records, and OSV/GHSA entries). The underlying cause is an impr...

PT-2020-13523 · Mosca · Moscajs Aedes

Name of the Vulnerable Software and Affected Versions: MoscaJS Aedes version 0.42.0 Description: An issue was discovered in the handling of exceptions during the writing of an invalid packet to a stream in lib/write.js. Recommendations: For version 0.42.0, update to version 0.42.1 to resolve the...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenJDK 8 vulnerabilities (USN-4453-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4453-1 advisory. Johannes Kuhn discovered that OpenJDK 8 incorrectly handled access control contexts. An attacker could possibly use this issue to...

Operation on a Resource after Expiration or Release in Jetty Server

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...