Skip to content
OpenAdvisories

Weakness (CWE)

CWE-391: DEPRECATED: Unchecked Error Condition

Base Deprecated Mapping prohibited

This entry has been deprecated because it used
ambiguous terminology and incorporated and confused multiple
weaknesses. See Mapping Notes for other recommendations, and
see Maintenance Notes for more detailed
explanations.

Source: MITRE CWE-391

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-74900

    openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

    openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available enca…

    jahlives openssl_encrypt openssl-encrypt PyPI
  • Critical 9.8
    CVE-2025-71325

    picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw

    picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files…

    picklescan picklescan picklescan PyPI
  • Critical 9.8
    CVE-2024-52316 Public exploit

    Apache Tomcat: Authentication bypass when using Jakarta Authentication API

    Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication (formerly JASPIC) ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven