CWE-248 · Input Validation and Logic
Uncaught Exception
369CVEs
0exploited
0with a public check
1likely (EPSS 10%+)
SortMost likely exploited
369 CVEs with CWE-248 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-59538Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhookargoproj · argo-cd · CVSS 7.5 · 2025-10-01 | 7.5 | 11% | 2025-10-01 |
| CVE-2025-53366MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Servicemodelcontextprotocol · python-sdk · CVSS 8.7 · 2025-07-04 | 8.7 | 9.8% | 2025-07-04 |
| CVE-2018-11466A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl…Siemens AG · SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D s… · 2018-12-12 | – | 4.1% | 2018-12-12 |
| CVE-2018-7852A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when…Schneider-Electric · Modicon M580 Modicon M340 Modicon Quantum Modicon Premium · CVSS 7.5 · 2019-05-22 | 7.5 | 3.5% | 2019-05-22 |
| CVE-2020-6019Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exce…Valvesoftware · Game Networking Sockets · 2020-11-13 | – | 2.8% | 2020-11-13 |
| CVE-2020-10604In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result…Osisoft · OSIsoft PI System multiple products and versions · 2020-07-24 | – | 2.1% | 2020-07-24 |
| CVE-2022-41940Uncaught exception in engine.iosocketio · engine.io · CVSS 7.1 · 2022-11-22 | 7.1 | 2.1% | 2022-11-22 |
| CVE-2013-10065Sysax Multi-Server <= 6.10 SSHD Key Exchange DoSSysax Software · Multi-Server · CVSS 8.7 · 2025-08-05 | 8.7 | 1.9% | 2025-08-05 |
| CVE-2018-11464A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All version…Siemens AG · SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · 2018-12-12 | – | 1.9% | 2018-12-12 |
| CVE-2019-6809A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versio…Schneider Electric SE · Modicon M580 · 2019-09-17 | – | 1.8% | 2019-09-17 |
| CVE-2019-6575A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMAT…Siemens · SIMATIC CP 443-1 OPC UA · CVSS 7.5 · 2019-04-17 | 7.5 | 1.7% | 2019-04-17 |
| CVE-2026-126346basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LFpatrickjuchli · basic-ftp · CVSS 5.9 · 2026-11-12 | 5.9 | 1.7% | 2026-11-12 |
| CVE-2022-24822Denial of Service in @podium/layout and @podium/proxypodium-lib · proxy · CVSS 7.5 · 2022-04-06 | 7.5 | 1.7% | 2022-04-06 |
| CVE-2020-15796A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affecte…Siemens · SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) · 2020-12-14 | – | 1.6% | 2020-12-14 |
| CVE-2019-6829A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possib…Schneider Electric SE · Modicon M580 · CVSS 7.5 · 2019-09-17 | 7.5 | 1.6% | 2019-09-17 |
| CVE-2025-3891Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledRedhat · mod_auth_openidc · CVSS 7.5 · 2025-04-29 | 7.5 | 1.6% | 2025-04-29 |
| CVE-2016-10363Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of servi…Elastic · Logstash · 2017-06-16 | – | 1.5% | 2017-06-16 |
| CVE-2019-6828A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions),…Schneider Electric SE · Modicon M580 · 2019-09-17 | – | 1.5% | 2019-09-17 |
| CVE-2019-10931A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI…Siemens AG · All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the res… · 2019-07-11 | – | 1.5% | 2019-07-11 |
| CVE-2020-10292Service DoS through arbitrary pointer dereferencing on KUKA simulatorKUKA Roboter GmbH · Visual Components Network License Server 2.0.8 · CVSS 8.2 · 2020-11-06 | 8.2 | 1.5% | 2020-11-06 |
| CVE-2022-31015Uncaught Exception (due to a data race) leads to process termination in WaitressPylons · waitress · CVSS 6.5 · 2022-05-31 | 6.5 | 1.5% | 2022-05-31 |
| CVE-2026-70082Windows DNS Denial of Service VulnerabilityMicrosoft · Windows Server 2012 · CVSS 7.5 · 2026-10-13 | 7.5 | 1.3% | 2026-10-13 |
| CVE-2023-31125Uncaught exception in engine.iosocketio · engine.io · CVSS 6.5 · 2023-05-08 | 6.5 | 1.3% | 2023-05-08 |
| CVE-2020-5129A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerabi…SonicWall · SMA1000 · 2020-03-26 | – | 1.3% | 2020-03-26 |
| CVE-2022-20675Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service VulnerabilityCisco · Cisco Web Security Appliance (WSA) · CVSS 5.3 · 2022-04-06 | 5.3 | 1.3% | 2022-04-06 |
| CVE-2024-20137In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional executi…MediaTek, Inc. · MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 · CVSS 7.5 · 2024-12-02 | 7.5 | 1.3% | 2024-12-02 |
| CVE-2023-3966Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetOpenvswitch · openvswitch · CVSS 7.5 · 2024-02-22 | 7.5 | 1.3% | 2024-02-22 |
| CVE-2026-50328Windows Server Update Service (WSUS) Tampering VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-07-14 | 7.5 | 1.2% | 2026-07-14 |
| CVE-2022-20919Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service VulnerabilityCisco · Cisco IOS · CVSS 8.6 · 2022-09-30 | 8.6 | 1.2% | 2022-09-30 |
| CVE-2022-36046Unexpected server crash in Next.js version 12.2.3vercel · next.js · CVSS 5.3 · 2022-08-31 | 5.3 | 1.2% | 2022-08-31 |
| CVE-2020-27121Cisco Unified Communications Manager IM and Presence Service Denial of Service VulnerabilityCisco · Cisco Unified Communications Manager IM and Presence Service · CVSS 4.3 · 2020-11-06 | 4.3 | 1.2% | 2020-11-06 |
| CVE-2026-69839Windows iSCSI Target Service Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.5 · 2026-09-08 | 6.5 | 1.1% | 2026-09-08 |
| CVE-2023-22477Mercurius is vulnerable to denial of service (DoS) when using subscriptionsmercurius-js · mercurius · CVSS 5.3 · 2023-01-09 | 5.3 | 1.1% | 2023-01-09 |
| CVE-2019-6830A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed…Schneider Electric SE · Modicon M580 · 2019-09-17 | – | 1.1% | 2019-09-17 |
| CVE-2023-2251Uncaught Exception in eemeli/yamleemeli · eemeli/yaml · CVSS 7.5 · 2023-04-24 | 7.5 | 1.1% | 2023-04-24 |
| CVE-2021-33010AVEVA System Platform Uncaught ExceptionAVEVA · AVEVA System Platform · CVSS 7.5 · 2022-04-04 | 7.5 | 1.1% | 2022-04-04 |
| CVE-2026-96945Windows Failover Cluster Denial of Service VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2026-10-13 | 7.5 | 1.1% | 2026-10-13 |
| CVE-2023-39948Uncaught fastcdr exception (Unexpected CDR type received) crashing fastddseProsima · Fast-DDS · CVSS 7.5 · 2023-08-11 | 7.5 | 1.0% | 2023-08-11 |
| CVE-2023-22941Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonSplunk · Splunk Enterprise · CVSS 6.5 · 2023-02-14 | 6.5 | 1.0% | 2023-02-14 |
| CVE-2021-25971Camaleon CMS - SVG File Upload Creates DoS for Media Upload Featurecamaleon_cms · camaleon_cms · CVSS 4.3 · 2021-10-20 | 4.3 | 1.0% | 2021-10-20 |
| CVE-2026-2229undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validationundici · undici · CVSS 7.5 · 2026-03-12 | 7.5 | 1.0% | 2026-03-12 |
| CVE-2021-36802Akaunting DoS via User-Controlled 'locale' VariableAkaunting · Akaunting · CVSS 6.5 · 2021-08-04 | 6.5 | 1.0% | 2021-08-04 |
| CVE-2021-32694Malicious Android application can crash the Nextcloud Android Clientnextcloud · security-advisories · CVSS 4.1 · 2021-06-17 | 4.1 | 1.0% | 2021-06-17 |
| CVE-2023-46239quic-go vulnerable to pointer dereference that can lead to panicquic-go · quic-go · CVSS 7.5 · 2023-10-31 | 7.5 | 1.0% | 2023-10-31 |
| CVE-2023-46135Panic in SignedPayload::from_payloadstellar · rs-stellar-strkey · CVSS 5.3 · 2023-10-25 | 5.3 | 1.0% | 2023-10-25 |
| CVE-2023-39945Malformed serialized data in a data submessage leads to unhandled exceptioneProsima · Fast-DDS · CVSS 8.2 · 2023-08-11 | 8.2 | 0.9% | 2023-08-11 |
| CVE-2023-38504Sails DoS vulnerability for apps with sockets enabledbalderdashy · sails · CVSS 7.5 · 2023-07-27 | 7.5 | 0.9% | 2023-07-27 |
| CVE-2024-11172Denial of Service in danny-avila/librechatdanny-avila · danny-avila/librechat · CVSS 7.5 · 2025-03-20 | 7.5 | 0.9% | 2025-03-20 |
| CVE-2021-41545A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884)…Siemens · Desigo DXR2 · 2022-05-10 | – | 0.9% | 2022-05-10 |
| CVE-2026-32641Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middlewareparseablehq · parseable · CVSS 7.5 · 2026-09-18 | 7.5 | 0.9% | 2026-09-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.