CWE-390 · 26 records

Detection of Error Condition Without Action

CVEs in this class

26 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
56Plan	CVE-2024-30255Proof of concept	HTTP/2: CPU exhaustion due to CONTINUATION frame floodenvoyproxy · envoy · CWE-390 Pre-auth Denial of service	High7.5	—	87.8%	Apr 4, 2024
56Plan	CVE-2024-27919No exploit	HTTP/2: memory exhaustion due to CONTINUATION frame floodenvoyproxy · envoy · CWE-390 Pre-auth Denial of service	High7.5	—	86.7%	Apr 4, 2024
40Plan	CVE-2021-40391No exploit	An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and gerbv project · gerbv · CWE-390 Pre-auth	Critical9.8	—	2.9%	Nov 19, 2021
39Monitor	CVE-2026-43493No exploit	crypto: pcrypt - Fix handling of MAY_BACKLOG requestslinux · linux kernel · CWE-390 Pre-auth	Critical9.8	—	0.6%	May 19, 2026
39Monitor	CVE-2026-111823Proof of concept	Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.mage · mage-ai · CWE-390 Pre-auth	Critical9.8	—	0.5%	Oct 17, 2026
37Monitor	CVE-2026-104480No exploit	Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membershipdiscord · libdave · CWE-390 Pre-auth	Critical9.4	—	0.3%	Oct 2, 2026
36Monitor	CVE-2019-5051No exploit	An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4.libsdl · sdl2 image · CWE-390 Pre-auth	High8.8	—	3.9%	Jul 3, 2019
36Monitor	CVE-2026-53434No exploit	Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connectorapache · tomcat · CWE-390 Pre-auth	Critical9.1	—	0.5%	Jun 29, 2026
34Monitor	CVE-2026-76642No exploit	util-linux libmount Privilege Escalation via Failed Mount Helperutil-linux · util-linux · CWE-390 Local privilege escalation	High8.5	—	0.2%	Sep 3, 2026
31Monitor	CVE-2025-46367No exploit	Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability.dell · alienware command center · CWE-390 RCE Local privilege escalation	High7.8	—	0.1%	Nov 13, 2025
31Monitor	CVE-2024-49841No exploit	Detection of Error Condition Without Action in Hypervisorqualcomm · snapdragon ar2 gen 1 firmware · CWE-390	High7.8	—	0.1%	May 6, 2025
29Monitor	CVE-2025-26465Proof of concept	Openssh: machine-in-the-middle attack if verifyhostkeydns is enabledopenbsd · openssh · CWE-390 Pre-auth	Medium6.8	—	7.7%	Feb 18, 2025
29Monitor	CVE-2026-114137No exploit	Django REST framework: TokenProxy.delete() reports success and revokes nothingencode · django-rest-framework · CWE-390 Pre-auth	High7.4	—	0.4%	Oct 21, 2026
28Monitor	CVE-2024-12086No exploit	Rsync: rsync server leaks arbitrary client filessamba · rsync · CWE-390 Pre-auth	Medium6.8	—	1.7%	Jan 14, 2025
27Monitor	CVE-2026-107275No exploit	@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed@fastify/jwt · @fastify/jwt · CWE-390	Medium6.8	—	0.3%	Oct 8, 2026
26Monitor	CVE-2025-27039No exploit	Detection of Error Condition Without Action in Computer Visionqualcomm · fastconnect 6900 firmware · CWE-390	Medium6.6	—	0.0%	Oct 9, 2025
25Monitor	CVE-2025-25204No exploit	`gh attestation verify` returns incorrect exit code during verification if no attestations are presentcli · cli · CWE-390	Medium6.3	—	0.4%	Feb 14, 2025
24Monitor	CVE-2017-7485No exploit	In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL envirpostgresql · postgresql · CWE-390 Pre-auth	Medium5.9	—	2.0%	May 12, 2017
24Monitor	CVE-2026-104002No exploit	Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)aws · powertools-lambda-python · CWE-390	Medium6.0	—	0.3%	Oct 1, 2026
23Monitor	CVE-2024-11942No exploit	Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002drupal · drupal · CWE-390 Pre-auth	Medium5.9	—	0.3%	Dec 5, 2024
23Monitor	CVE-2026-59845No exploit	Libssh: libssh: denial of service via unchecked proxycommand fork() failurelibssh · libssh · CWE-390 Denial of service	Medium5.9	—	0.1%	Jul 21, 2026
22Monitor	CVE-2024-24789No exploit	Mishandling of corrupt central directory record in archive/zipgolang · go · CWE-390	Medium5.5	—	0.4%	Jun 5, 2024
21Monitor	CVE-2024-20316No exploit	A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to accescisco · ios xe · CWE-390 Pre-auth	Medium5.3	—	0.4%	Mar 27, 2024
17Monitor	CVE-2026-29810No exploit	CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.cyberpanel · cyberpanel · CWE-390	Medium4.3	—	0.3%	Sep 13, 2026
17Monitor	CVE-2026-48792No exploit	pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root executionmcdope · pam_usb · CWE-390	Medium4.4	—	0.1%	May 27, 2026

CVE-2024-30255
56Plan
HTTP/2: CPU exhaustion due to CONTINUATION frame flood
HighCVSS 7.5Proof of conceptEPSS 87%
- Pre-auth
- Denial of service
envoyproxy · envoyApr 4, 2024
CVE-2024-27919
56Plan
HTTP/2: memory exhaustion due to CONTINUATION frame flood
HighCVSS 7.5No exploitEPSS 86%
- Pre-auth
- Denial of service
envoyproxy · envoyApr 4, 2024
CVE-2021-40391
40Plan
An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
gerbv project · gerbvNov 19, 2021
CVE-2026-43493
39Monitor
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linux kernelMay 19, 2026
CVE-2026-111823
39Monitor
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
mage · mage-aiOct 17, 2026
CVE-2026-104480
37Monitor
Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
discord · libdaveOct 2, 2026
CVE-2019-5051
36Monitor
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4.
HighCVSS 8.8No exploitEPSS 3%
- Pre-auth
libsdl · sdl2 imageJul 3, 2019
CVE-2026-53434
36Monitor
Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
apache · tomcatJun 29, 2026
CVE-2026-76642
34Monitor
util-linux libmount Privilege Escalation via Failed Mount Helper
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
util-linux · util-linuxSep 3, 2026
CVE-2025-46367
31Monitor
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
dell · alienware command centerNov 13, 2025
CVE-2024-49841
31Monitor
Detection of Error Condition Without Action in Hypervisor
HighCVSS 7.8No exploitEPSS 0%
qualcomm · snapdragon ar2 gen 1 firmwareMay 6, 2025
CVE-2025-26465
29Monitor
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
MediumCVSS 6.8Proof of conceptEPSS 7%
- Pre-auth
openbsd · opensshFeb 18, 2025
CVE-2026-114137
29Monitor
Django REST framework: TokenProxy.delete() reports success and revokes nothing
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
encode · django-rest-frameworkOct 21, 2026
CVE-2024-12086
28Monitor
Rsync: rsync server leaks arbitrary client files
MediumCVSS 6.8No exploitEPSS 1%
- Pre-auth
samba · rsyncJan 14, 2025
CVE-2026-107275
27Monitor
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
MediumCVSS 6.8No exploitEPSS 0%
@fastify/jwt · @fastify/jwtOct 8, 2026
CVE-2025-27039
26Monitor
Detection of Error Condition Without Action in Computer Vision
MediumCVSS 6.6No exploitEPSS 0%
qualcomm · fastconnect 6900 firmwareOct 9, 2025
CVE-2025-25204
25Monitor
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
MediumCVSS 6.3No exploitEPSS 0%
cli · cliFeb 14, 2025
CVE-2017-7485
24Monitor
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL envir
MediumCVSS 5.9No exploitEPSS 2%
- Pre-auth
postgresql · postgresqlMay 12, 2017
CVE-2026-104002
24Monitor
Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
MediumCVSS 6.0No exploitEPSS 0%
aws · powertools-lambda-pythonOct 1, 2026
CVE-2024-11942
23Monitor
Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
drupal · drupalDec 5, 2024
CVE-2026-59845
23Monitor
Libssh: libssh: denial of service via unchecked proxycommand fork() failure
MediumCVSS 5.9No exploitEPSS 0%
- Denial of service
libssh · libsshJul 21, 2026
CVE-2024-24789
22Monitor
Mishandling of corrupt central directory record in archive/zip
MediumCVSS 5.5No exploitEPSS 0%
golang · goJun 5, 2024
CVE-2024-20316
21Monitor
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to acces
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
cisco · ios xeMar 27, 2024
CVE-2026-29810
17Monitor
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
MediumCVSS 4.3No exploitEPSS 0%
cyberpanel · cyberpanelSep 13, 2026
CVE-2026-48792
17Monitor
pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution
MediumCVSS 4.4No exploitEPSS 0%
mcdope · pam_usbMay 27, 2026

All vulnerability classes