CWE-390: Detection of Error Condition Without Action
The product detects a specific error, but takes no actions to handle the error.
A kind of CWE-755 Improper Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- sandboxie-plus sandboxie Sandboxie-Plus: Sandbox containment bypass 6.9 Medium
- aws firecracker Guest access to Firecracker process memory after a failed memory discard 7.1 High
- encode django-rest-framework Django REST framework: TokenProxy.delete() reports success and revokes nothing 7.4 High
- mage mage-ai Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an... 9.8 Critical
- @fastify/jwt @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed 6.8 Medium
- discord libdave Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership 9.4 Critical
- aws powertools-lambda-python Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) 6.0 Medium
- asynchttpclient async-http-client AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified 3.7 Low
- cyberpanel CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. 4.3 Medium
- util-linux util-linux libmount Privilege Escalation via Failed Mount Helper 8.5 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: denial of service via unchecked proxycommand fork() failure 5.3 Medium
- apache tomcat Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector 9.1 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers 9.8 Critical
- mcdope pam usb pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution 4.4 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more crypto: pcrypt - Fix handling of MAY_BACKLOG requests 9.8 Critical
- sigstore gitsign gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers 5.4 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Improper handling of error condition during host-induced faults can allow a local high-privileged... 1.8 Low
- dell alienware command center Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of... 7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sxr2230p firmware +7 more +9 more Detection of Error Condition Without Action in Computer Vision 6.6 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +171 more +173 more Detection of Error Condition Without Action in Hypervisor 7.8 High
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 more Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Medium
- cli `gh attestation verify` returns incorrect exit code during verification if no attestations are present 6.3 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal 6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync 6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files 6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents 7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling 9.8 Critical
- drupal, drupal core +1 more Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 5.9 Medium
- envoyproxy envoy HTTP/2: CPU exhaustion due to CONTINUATION frame flood 5.3 Medium
- envoyproxy envoy HTTP/2: memory exhaustion due to CONTINUATION frame flood 7.5 High
- cisco ios xe software, ios xe +1 more A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow... 5.8 Medium
- sap netweaver application server java In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22... 9.8 Critical
- gerbv, debian linux, fedoraproject fedora +2 more An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality... 10.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Improper handling of address deregistration on failure can lead to new GPU address allocation... 6.2 Medium
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 more An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in... 8.8 High
- postgresql In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6... 5.9 Medium