Skip to content

CWE-248 · weakness in Input Validation and Logic

Uncaught Exception

369 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
1

Every one of the 369 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhookCVE-2025-59538argoproj · CVSS 7.5 · 11% likely

    Argoproj

  2. MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of ServiceCVE-2025-53366modelcontextprotocol · CVSS 8.7 · 9.8% likely

    Model Context Protocol

  3. A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl…CVE-2018-11466Siemens AG · 4.1% likely

    Siemens

  4. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when…CVE-2018-7852Schneider-Electric · CVSS 7.5 · 3.5% likely

    Schneider Electric

  5. Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exce…CVE-2020-6019Valvesoftware · 2.8% likely

    Valvesoftware

  6. In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result…CVE-2020-10604Osisoft · 2.1% likely

    Osisoft

  7. Uncaught exception in engine.ioCVE-2022-41940socketio · CVSS 7.1 · 2.1% likely

    Socket.io

  8. Sysax Multi-Server <= 6.10 SSHD Key Exchange DoSCVE-2013-10065Sysax Software · CVSS 8.7 · 1.9% likely

    Sysax

  9. A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All version…CVE-2018-11464Siemens AG · 1.9% likely

    Siemens

  10. A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versio…CVE-2019-6809Schneider Electric SE · 1.8% likely

    Schneider Electric

  11. A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMAT…CVE-2019-6575Siemens · CVSS 7.5 · 1.7% likely

    Siemens

  12. basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LFCVE-2026-126346patrickjuchli · CVSS 5.9 · 1.7% likely

    Patrickjuchli

  13. Denial of Service in @podium/layout and @podium/proxyCVE-2022-24822podium-lib · CVSS 7.5 · 1.7% likely
  14. A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affecte…CVE-2020-15796Siemens · 1.6% likely

    Siemens

  15. A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possib…CVE-2019-6829Schneider Electric SE · CVSS 7.5 · 1.6% likely

    Schneider Electric

  16. Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Redhat · CVSS 7.5 · 1.6% likely

    Red Hat

  17. Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of servi…CVE-2016-10363Elastic · 1.5% likely

    Elastic

  18. A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions),…CVE-2019-6828Schneider Electric SE · 1.5% likely

    Schneider Electric

  19. A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI…CVE-2019-10931Siemens AG · 1.5% likely

    Siemens

  20. Service DoS through arbitrary pointer dereferencing on KUKA simulatorCVE-2020-10292KUKA Roboter GmbH · CVSS 8.2 · 1.5% likely
  21. Uncaught Exception (due to a data race) leads to process termination in WaitressCVE-2022-31015Pylons · CVSS 6.5 · 1.5% likely

    Pylons

  22. Windows DNS Denial of Service VulnerabilityCVE-2026-70082Microsoft · CVSS 7.5 · 1.3% likely

    Microsoft

  23. Uncaught exception in engine.ioCVE-2023-31125socketio · CVSS 6.5 · 1.3% likely

    Socket.io

  24. A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerabi…CVE-2020-5129SonicWall · 1.3% likely

    SonicWall

  25. Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service VulnerabilityCVE-2022-20675Cisco · CVSS 5.3 · 1.3% likely

    Cisco

  26. In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional executi…CVE-2024-20137MediaTek, Inc. · CVSS 7.5 · 1.3% likely

    MediaTek, Inc.

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.