CWE-230 · 13 records

Improper Handling of Missing Values

CVEs in this class

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-10508Proof of concept	RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recoverymetagauss · registrationmagic · CWE-230 Pre-auth	Critical9.8	—	1.5%	Nov 9, 2024
39Monitor	CVE-2024-11024No exploit	AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Resetapppresser · apppresser · CWE-230 Pre-auth	Critical9.8	—	0.6%	Nov 26, 2024
34Monitor	CVE-2026-20086No exploit	A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controllercisco · cisco ios xe software · CWE-230 Pre-auth Denial of service	High8.6	—	0.3%	Mar 25, 2026
31Monitor	CVE-2024-0208No exploit	Improper Handling of Missing Values in Wiresharkwireshark · wireshark · CWE-230 Pre-auth Denial of service	High7.5	—	1.8%	Jan 3, 2024
31Monitor	CVE-2024-0048No exploit	In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nugoogle · android · CWE-230 Local privilege escalation	High7.8	—	0.1%	Mar 11, 2024
30Monitor	CVE-2024-9781No exploit	Improper Handling of Missing Values in Wiresharkwireshark · wireshark · CWE-230 Pre-auth Denial of service	High7.5	—	0.3%	Oct 10, 2024
28Monitor	CVE-2026-25658No exploit	Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerabilityericsson · packet core gateway · CWE-230 Pre-auth	High7.1	—	0.2%	Jun 5, 2026
28Monitor	CVE-2026-25659No exploit	Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerabilityericsson · packet core gateway · CWE-230 Pre-auth	High7.1	—	0.2%	Jun 5, 2026
26Monitor	CVE-2024-6237No exploit	389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search requestredhat · directory server · CWE-230 Denial of service	Medium6.5	—	0.9%	Jul 9, 2024
26Monitor	CVE-2025-23225No exploit	IBM MQ denial of serviceibm · mq appliance · CWE-230 Denial of service	Medium6.5	—	0.4%	Feb 27, 2025
26Monitor	CVE-2023-1697No exploit	Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is receivedjuniper · junos · CWE-230 Pre-auth Denial of service	Medium6.5	—	0.3%	Apr 17, 2023
26Monitor	CVE-2026-1461No exploit	Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Valueswpinsider-1 · simple membership · CWE-230 Pre-auth	Medium6.5	—	0.2%	Feb 19, 2026
26Monitor	CVE-2026-19395No exploit	An empty <img> attribute value in styled text triggers a parser error that halts the device.qt · qt for mcus · CWE-230 Pre-auth	Medium6.6	—	0.2%	Oct 5, 2026

CVE-2024-10508
39Monitor
RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
metagauss · registrationmagicNov 9, 2024
CVE-2024-11024
39Monitor
AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
apppresser · apppresserNov 26, 2024
CVE-2026-20086
34Monitor
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco ios xe softwareMar 25, 2026
CVE-2024-0208
31Monitor
Improper Handling of Missing Values in Wireshark
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
wireshark · wiresharkJan 3, 2024
CVE-2024-0048
31Monitor
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nu
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidMar 11, 2024
CVE-2024-9781
30Monitor
Improper Handling of Missing Values in Wireshark
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
wireshark · wiresharkOct 10, 2024
CVE-2026-25658
28Monitor
Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
ericsson · packet core gatewayJun 5, 2026
CVE-2026-25659
28Monitor
Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
ericsson · packet core gatewayJun 5, 2026
CVE-2024-6237
26Monitor
389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
redhat · directory serverJul 9, 2024
CVE-2025-23225
26Monitor
IBM MQ denial of service
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
ibm · mq applianceFeb 27, 2025
CVE-2023-1697
26Monitor
Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper · junosApr 17, 2023
CVE-2026-1461
26Monitor
Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
wpinsider-1 · simple membershipFeb 19, 2026
CVE-2026-19395
26Monitor
An empty <img> attribute value in styled text triggers a parser error that halts the device.
MediumCVSS 6.6No exploitEPSS 0%
- Pre-auth
qt · qt for mcusOct 5, 2026

All vulnerability classes