CWE-253: Incorrect Check of Function Return Value
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
A kind of CWE-573 Improper Following of Specification by Caller.
From the CWE List. © The MITRE Corporation.
Newest
- owasp-modsecurity modsecurity ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match 5.8 Medium
- adminer Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability 7.2 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 5.9 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more bpf: Fix ld_{abs,ind} failure path analysis in subprogs 7.8 High
- caliptra core runtime firmware MCU Firmware Update Authentication Bypass on Caliptra Core 7.2 High
- yubico webauthn-server-core Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a... 7.5 High
- mutt mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. 3.7 Low
- uutils coreutils uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode 5.5 Medium
- uutils coreutils uutils coreutils chmod False Success Exit Code in Recursive Mode 5.5 Medium
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 more Corosync: corosync: denial of service and information disclosure via crafted udp packet 8.2 High
- eclipse threadx The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_… 7.8 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more GNU Binutils prdbg.c tg_tag_type return value 4.8 Medium
- asterisk Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request 7.5 High
- apache http server Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 6.3 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 more Windows Hyper-V Denial of Service Vulnerability 7.5 High
- splunk, splunk enterprise +1 more Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise 8.8 High
- envoyproxy envoy Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes 7.5 High
- nlnet labs routinator, fedoraproject fedora +1 more Routinator terminates when RTR connection is reset too quickly after opening 7.5 High
- totolink x6000r firmware An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary... 9.8 Critical
- squid-cache squid Denial of Service in Helper Process management 8.6 High
- microfocus cobol server, enterprise developer, enterprise server +4 more +6 more Authentication bypass in OpenText (Micro Focus) Enterprise Server 9.8 Critical
- citrix adc and citrix gateway, gateway, application delivery controller +2 more Arbitrary file read 6.3 Medium
- paritytech ink, parity ink\! +1 more ink! vulnerable to incorrect decoding of storage value when using `DelegateCall` 5.3 Medium
- flask-session-captcha project flask-session-captcha Potential Captcha Validate Bypass in flask-session-captcha 5.3 Medium
- skytable Incorrect Check of Function Return Value in Skytable 7.5 High
- f2fs-tools project f2fs-tools An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs... 4.4 Medium
- red hat, inc. keycloak node.js adapter, keycloak keycloak-nodejs-auth-utils +1 more keycloak-connect and keycloak-js improperly handle invalid tokens 9.8 Critical