Improper Handling of Missing Values
CWE-230
The product does not handle or incorrectly handles when a parameter, field, or argument name is specified, but the associated value is missing, i.e. it is empty, blank, or null.
We track 5 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.7.
Latest Improper Handling of Missing Values vulnerabilities
- 8.6 High severity
Cisco IOS XE Software: Improper Handling of Missing Values
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an unauthenticated, remote attacker to cause a denial of service (D
- 9.8 Critical severity
AppPresser – Mobile App Framework: Improper Handling of Missing Values
The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating
- 9.8 Critical severity
RegistrationMagic – Custom Registration Forms…: Improper Handling of Missing Values
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the
- 7.5 High severity
Wireshark: Improper Handling of Missing Values
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- 7.8 High severity
Android: Improper Handling of Missing Values
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User inte