Weakness (CWE)
CWE-391: DEPRECATED: Unchecked Error Condition
This entry has been deprecated because it used
ambiguous terminology and incorporated and confused multiple
weaknesses. See Mapping Notes for other recommendations, and
see Maintenance Notes for more detailed
explanations.
Source: MITRE CWE-391
8 results · Clear filters · Feed
-
Medium 6.5
AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers
Missing exception handlers in AvastSvc native message dispatcher (ashServ.dll) on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based …
-
Medium 6.5
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal pat…
-
Medium 6.1
Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability
A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE fea…
-
Medium 5.9
Envoy incorrectly accepts HTTP 200 response for entering upgrade mode
Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a server can be tricked into adding an upgrade header into a response. Per RFC https://www.rfc-editor.org/rfc/rfc7230#section-6.…
-
Medium 5.3
In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of p…
-
Medium 5.3
Unchecked Error Condition in froxlor/froxlor
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
-
Medium 6.5
Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message
An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service (DoS). In a subscriber management / broadband ed…
-
Medium —
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions < 0.9.1 the auth portion of the url is outputted as part of the grunt tasks logging …