CWE-703 · Input Validation and Logic
Improper Check or Handling of Exceptional Conditions
152CVEs
SortMost likely exploited
152 CVEs with CWE-703 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-25370In CISA KEVExploitedAn incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.Samsung Mobile · Samsung Mobile Devices · CVSS 6.1 · 2021-03-26 | 6.1 | 0.9% | 2021-03-26 |
| CVE-2021-25372In CISA KEVExploitedAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.Samsung Mobile · Samsung Mobile Devices · CVSS 6.1 · 2021-03-26 | 6.1 | 0.8% | 2021-03-26 |
| CVE-2022-22265In CISA KEVExploitedAn improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.Samsung Mobile · Samsung Mobile Devices · CVSS 5 · 2022-01-07 | 5.0 | 0.4% | 2022-01-07 |
| CVE-2024-21894A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted r…Ivanti · Connect Secure · CVSS 8.2 · 2024-04-04 | 8.2 | 19% | 2024-04-04 |
| CVE-2019-5031An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trig…Foxitsoftware · Foxit · CVSS 8.8 · 2019-10-02 | 8.8 | 6.0% | 2019-10-02 |
| CVE-2023-49786Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiationasterisk · asterisk · CVSS 7.5 · 2023-12-14 | 7.5 | 5.3% | 2023-12-14 |
| CVE-2024-22052A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send speciall…Ivanti · Connect Secure · CVSS 7.5 · 2024-04-04 | 7.5 | 3.8% | 2024-04-04 |
| CVE-2024-10781Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installationcleantalk · Spam protection, Honeypot, Anti-Spam by CleanTalk · CVSS 8.1 · 2024-11-26 | 8.1 | 3.7% | 2024-11-26 |
| CVE-2024-22053A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted re…Ivanti · Connect Secure · CVSS 8.2 · 2024-04-04 | 8.2 | 3.5% | 2024-04-04 |
| CVE-2024-22023An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially c…Ivanti · Connect Secure · CVSS 5.3 · 2024-04-04 | 5.3 | 3.0% | 2024-04-04 |
| CVE-2022-41777Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject…kujirahand · Nako3edit, editor component of nadesiko3 (PC Version) · CVSS 7.5 · 2022-12-05 | 7.5 | 1.7% | 2022-12-05 |
| CVE-2017-16014Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of servic…HackerOne · http-proxy node module · 2018-06-04 | – | 1.6% | 2018-06-04 |
| CVE-2024-29205An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remot…Ivanti · Connect Secure · CVSS 7.5 · 2024-04-24 | 7.5 | 1.6% | 2024-04-24 |
| CVE-2022-25252PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional ConditionsPTC · Axeda agent · CVSS 7.5 · 2022-03-16 | 7.5 | 1.6% | 2022-03-16 |
| CVE-2023-51443FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiationsignalwire · freeswitch · CVSS 7.5 · 2023-12-27 | 7.5 | 1.5% | 2023-12-27 |
| CVE-2018-12551When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid.…The Eclipse Foundation · Eclipse Mosquitto · 2019-03-27 | – | 1.5% | 2019-03-27 |
| CVE-2020-2075Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10…Sick · Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LM… · 2020-08-31 | – | 1.4% | 2020-08-31 |
| CVE-2020-1644Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packetsJuniper Networks · Junos OS · CVSS 7.5 · 2020-07-17 | 7.5 | 1.3% | 2020-07-17 |
| CVE-2022-31152Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rulesmatrix-org · synapse · CVSS 6.4 · 2022-09-02 | 6.4 | 1.2% | 2022-09-02 |
| CVE-2019-10927A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG…Siemens AG · SCALANCE SC-600 · 2019-08-13 | – | 1.2% | 2019-08-13 |
| CVE-2024-26007An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service…Fortinet · FortiOS · CVSS 5 · 2024-05-14 | 5.0 | 1.2% | 2024-05-14 |
| CVE-2023-0004PAN-OS: Local File Deletion VulnerabilityPalo Alto Networks · PAN-OS · CVSS 6.5 · 2023-04-12 | 6.5 | 1.1% | 2023-04-12 |
| CVE-2020-1639Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.Juniper Networks · Junos OS · CVSS 7.5 · 2020-04-08 | 7.5 | 1.1% | 2020-04-08 |
| CVE-2021-0286Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restartJuniper Networks · Junos OS Evolved · CVSS 7.5 · 2021-07-15 | 7.5 | 1.1% | 2021-07-15 |
| CVE-2021-0264Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog…Juniper Networks · Junos OS · CVSS 5.9 · 2021-04-22 | 5.9 | 1.0% | 2021-04-22 |
| CVE-2025-43240A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.Apple · Safari · CVSS 6.2 · 2025-07-29 | 6.2 | 1.0% | 2025-07-29 |
| CVE-2021-23859Denial of Service and Authentication Bypass Vulnerability in multiple Bosch productsBosch · BVMS · CVSS 9.1 · 2021-12-08 | 9.1 | 1.0% | 2021-12-08 |
| CVE-2025-46290A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS T…Apple · iOS and iPadOS · CVSS 7.5 · 2026-02-11 | 7.5 | 0.9% | 2026-02-11 |
| CVE-2022-20924A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software coul…Cisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 7.7 · 2022-11-10 | 7.7 | 0.9% | 2022-11-10 |
| CVE-2023-45927S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().Jedsoft · S-Lang · CVSS 9.1 · 2024-03-27 | 9.1 | 0.8% | 2024-03-27 |
| CVE-2022-22290Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.Samsung Mobile · Samsung Internet · CVSS 6.5 · 2022-01-14 | 6.5 | 0.8% | 2022-01-14 |
| CVE-2021-25425Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.Samsung Mobile · Samsung Health · 2021-06-11 | – | 0.8% | 2021-06-11 |
| CVE-2024-39815Vonets WiFi Bridges Improper Check or Handling of Exceptional ConditionsVonets · VAR1200-H · CVSS 9.1 · 2024-08-08 | 9.1 | 0.8% | 2024-08-08 |
| CVE-2021-25419Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.Samsung Mobile · Samsung Internet · 2021-06-11 | – | 0.8% | 2021-06-11 |
| CVE-2023-32230An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.Bosch · Video Recording Manager · CVSS 7.5 · 2023-12-18 | 7.5 | 0.7% | 2023-12-18 |
| CVE-2022-23003Shared secret or Point multiplication of NIST P-256 points with X coordinate of zeroWestern Digital · Sweet B Library · CVSS 5.3 · 2022-07-29 | 5.3 | 0.7% | 2022-07-29 |
| CVE-2022-23002Point Compression/Decompression of NIST P-256 points with X coordinate of zeroWestern Digital · Sweet B Library · CVSS 5.3 · 2022-07-29 | 5.3 | 0.7% | 2022-07-29 |
| CVE-2025-70758chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via he…No vendor recorded · CVSS 7.5 · 2026-02-03 | 7.5 | 0.7% | 2026-02-03 |
| CVE-2023-22413Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packetsJuniper Networks · Junos OS · CVSS 7.5 · 2023-01-12 | 7.5 | 0.7% | 2023-01-12 |
| CVE-2025-47913Potential denial of service in golang.org/x/crypto/ssh/agentgolang.org/x/crypto · golang.org/x/crypto/ssh/agent · CVSS 7.5 · 2025-11-13 | 7.5 | 0.7% | 2025-11-13 |
| CVE-2021-23261Overriding the system configuration file causes a denial of serviceCrafter Software · Crafter CMS · CVSS 4.5 · 2021-12-02 | 4.5 | 0.7% | 2021-12-02 |
| CVE-2026-65351This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2,…Apple · Safari · CVSS 4.3 · 2026-08-17 | 4.3 | 0.6% | 2026-08-17 |
| CVE-2026-65332This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2,…Apple · Safari · CVSS 4.3 · 2026-08-17 | 4.3 | 0.6% | 2026-08-17 |
| CVE-2026-65331This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2,…Apple · Safari · CVSS 4.3 · 2026-08-17 | 4.3 | 0.6% | 2026-08-17 |
| CVE-2026-71640An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory…No vendor recorded · CVSS 9.1 · 2026-09-10 | 9.1 | 0.6% | 2026-09-10 |
| CVE-2023-36831Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is appliedJuniper Networks · Junos OS · CVSS 7.5 · 2023-07-14 | 7.5 | 0.6% | 2023-07-14 |
| CVE-2023-28965Junos OS: QFX10002: Failure of storm control feature may lead to Denial of ServiceJuniper Networks · Junos OS · CVSS 6.5 · 2023-04-17 | 6.5 | 0.6% | 2023-04-17 |
| CVE-2026-44893Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthnetty · netty · CVSS 7.5 · 2026-06-12 | 7.5 | 0.6% | 2026-06-12 |
| CVE-2025-59531Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payloadargoproj · argo-cd · CVSS 7.5 · 2025-10-01 | 7.5 | 0.6% | 2025-10-01 |
| CVE-2021-25380Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user.Samsung Mobile · Bixby · CVSS 5.8 · 2021-04-09 | 5.8 | 0.6% | 2021-04-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.