Missing Report of Error Condition
CWE-392
The product encounters an error but does not provide a status code or return value to indicate that an error has occurred.
We track 7 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8.
Latest Missing Report of Error Condition vulnerabilities
- 7.4 High severity
net-imap: Missing Report of Error Condition
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue
- 7.1 High severity
Jetson Orin, IGX Orin and Xavier Devices: Missing Report of Error Condition
NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, da
- 9.0 Critical severity
ConnMan: Missing Report of Error Condition
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code
- 7.4 High severity
OpenSSL: Missing Report of Error Condition
Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and
- 8.6 High severity
rust-phonenumber: Improper Access Control
phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber,
- 7.5 High severity
blurhash-rs: Improper Validation of Specified Quantity in Input
blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turned into a gradient of colors representing the original image. In version 0.1.1, the blurhash parsing code may panic due to multiple panic-gua
- 7.5 High severity
rust-phonenumber: Improper Validation of Specified Quantity in Input
phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions `0.3.3+8.13.9` and `0.2.5+8.11.3`, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a