Skip to content

CWE-388 · weakness in Other weaknesses

Error Handling

37 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
2

Every one of the 37 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow…CVE-2018-0155Cisco · CVSS 8.6 · 7.7% likely

    Cisco

  2. In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially craft…CVE-2018-1002105Kubernetes · CVSS 9.8 · 87% likely

    Kubernetes

  3. A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.1…CVE-2016-8745Apache Software Foundation · 16% likely

    Apache

  4. An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cCVE-2016-9778ISC · CVSS 7.5 · 6.8% likely

    ISC

  5. The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."CVE-2014-98413.9% likely
  6. ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.CVE-2014-98263.7% likely
  7. A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects…CVE-2017-5401Mozilla · 3.0% likely

    Mozilla

  8. A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remo…CVE-2016-6357Cisco AsyncOS through 9.9.6-026 · 2.4% likely
  9. A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) c…CVE-2016-1480Cisco AsyncOS through WSA10.0.0-000 · 2.4% likely
  10. Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remo…CVE-2006-66822.0% likely
  11. Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…CVE-2016-99671.9% likely
  12. Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…CVE-2016-99661.9% likely
  13. Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…CVE-2016-99651.9% likely
  14. The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (ap…CVE-2016-100621.9% likely
  15. Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service VulnerabilityCVE-2020-3509Cisco · CVSS 8.6 · 1.4% likely

    Cisco

  16. Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service VulnerabilityCVE-2020-3510Cisco · CVSS 8.6 · 1.4% likely

    Cisco

  17. In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, M…CVE-2016-10414Qualcomm, Inc. · 1.3% likely

    Qualcomm, Inc.

  18. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition c…CVE-2014-9985Qualcomm, Inc. · 1.2% likely

    Qualcomm, Inc.

  19. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9…CVE-2016-10466Qualcomm, Inc. · 1.2% likely

    Qualcomm, Inc.

  20. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/…CVE-2015-9120Qualcomm, Inc. · 1.1% likely

    Qualcomm, Inc.

  21. A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condit…CVE-2023-20227Cisco · CVSS 8.6 · 0.9% likely

    Cisco

  22. A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Smal…CVE-2018-0415Cisco Systems, Inc. · 0.6% likely

    Cisco

  23. Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service VulnerabilityCVE-2026-20263Cisco · CVSS 8.6 · 0.6% likely

    Cisco

  24. linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.CVE-2019-130460.5% likely
  25. On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being ac…CVE-2016-79910.5% likely
  26. **DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prol…CVE-2019-123800.5% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in