CWE-393: Return of Wrong Status Code
A function or operation returns an incorrect return value or status code that does not indicate the true result of execution, causing the product to modify its behavior based on the incorrect result.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- legacyupdate Legacy Update ActiveX control accepts unauthorized hosting origins 9.9 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more Sssd: sssd: access control bypass via premature ldap access rule evaluation 6.8 Medium
- apache software foundation thrift Apache Thrift: C++ WebSocket server transport does not read a full request length 6.3 Medium
- apache software foundation thrift Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op 6.9 Medium
- apache software foundation thrift Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end 6.3 Medium
- wolfssl Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage 8.3 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more bpf: Fix linked reg delta tracking when src_reg == dst_reg 7.8 High
- krajowa izba rozliczeniowa szafir sdk Improper Certificate Verification in Szafir SDK 9.3 Critical
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 more net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more Libssh: invalid return code for chacha20 poly1305 with openssl backend 8.1 High
- gnome libxml2 In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the... 5.6 Medium
- opensc project pam pkcs11 pam-pkcs11 - security update 6.7 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 more Windows Hyper-V Remote Code Execution Vulnerability 8.8 High
- getgrav grav Server-side Template Injection (SSTI) in grav 7.2 High
- cloud foundry routing, cloudfoundry routing release +1 more Cloud Foundry GoRouter is vulnerable to cache poisoning 5.3 Medium