CWE-394: Unexpected Status Code or Return Value
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
A kind of CWE-754 Improper Check for Unusual or Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- openbsd openssh sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround... 8.1 High
- sirius computer, inc. crux agent Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated 6.3 Medium
- arm mbed tls In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy... 2.9 Low
- libexpat project libexpat In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to... 5.9 Medium
- copeland xweb 300d pro, xweb 500b pro, xweb 500d pro +3 more +5 more Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value 8.6 High
- amd uprof, μprof +1 more Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially... 7.1 High
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Lack of Graceful Error Handling - HTTP 5xx Error 10.0 Critical
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Systemic Internal Server Errors - HTTP 500 Response 10.0 Critical
- ping identity pingfederate Possible thread exhaustion from processing http responses in PingFederate Google Adapter 6.9 Medium
- yubico pam-u2f In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product... 7.3 High
- plv8 Plv8 Deferred Trigger Privilege Escalation 7.2 High
- siemens sinec ins A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI... 2.7 Low
- honeywell direct station, engineering station, experion server +1 more +3 more Server Data type confusion - info leak 7.5 High
- juniper junos, juniper networks junos os +1 more Junos OS: The kernel will crash when certain USB devices are inserted 4.6 Medium
- flask-session-captcha project flask-session-captcha Potential Captcha Validate Bypass in flask-session-captcha 5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Invariant in IndexBoundsBuilder 6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Post-auth queries on compound index may crash mongod 6.5 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core 7.5 High