Skip to content
Noroxi

CWE-391 · 26 records

Unchecked Error Condition

CVEs in this class

26 records

  • CVE-2024-52316
    41Plan

    Apache Tomcat: Authentication bypass when using Jakarta Authentication API

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    apache · tomcatNov 18, 2024

  • CVE-2017-12180
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to cra

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12183
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or po

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12178
    40Plan

    xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server t

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12179
    40Plan

    xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12177
    40Plan

    xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X ser

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12186
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash o

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12181
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12182
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12184
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12185
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to c

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12176
    40Plan

    xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X

    CriticalCVSS 9.8No exploitEPSS 4%

    debian · debian linuxJan 24, 2018

  • CVE-2017-12187
    40Plan

    xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or po

    CriticalCVSS 9.8No exploitEPSS 3%

    debian · debian linuxJan 24, 2018

  • GHSA-5rph-q42j-36j9
    39Monitor

    Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

    CriticalCVSS 9.8No exploit

    PyPI · picklescanJun 17, 2026

  • CVE-2025-71325
    37Monitor

    picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw

    CriticalCVSS 9.3No exploitEPSS 0%

    picklescan · picklescanJun 17, 2026

  • CVE-2026-74900
    37Monitor

    openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

    CriticalCVSS 9.3No exploitEPSS 0%

    jahlives · openssl encryptAug 17, 2026

  • CVE-2016-10526
    34Monitor

    A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth p

    HighCVSS 8.6No exploitEPSS 1%

    grunt-gh-pages project · grunt-gh-pagesMay 31, 2018

  • CVE-2024-23326
    32Monitor

    Envoy incorrectly accepts HTTP 200 response for entering upgrade mode

    HighCVSS 8.2No exploitEPSS 0%

    envoyproxy · envoyJun 4, 2024

  • CVE-2019-14853
    31Monitor

    An error-handling flaw was found in python-ecdsa before version 0.13.3.

    HighCVSS 7.5No exploitEPSS 2%

    python-ecdsa project · python-ecdsaNov 26, 2019

  • CVE-2017-7496
    28Monitor

    fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of

    HighCVSS 7.0No exploitEPSS 0%

    fedoraproject · arm installerJun 26, 2017

  • CVE-2020-14383
    27Monitor

    A flaw was found in samba's DNS server.

    MediumCVSS 6.5No exploitEPSS 2%

    samba · sambaDec 1, 2020

  • CVE-2022-22160
    26Monitor

    Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

    MediumCVSS 6.5No exploitEPSS 0%

    juniper · junosJan 18, 2022

  • CVE-2022-20849
    24Monitor

    Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    cisco · ios xrNov 15, 2024

  • CVE-2018-1091
    22Monitor

    In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be trigge

    MediumCVSS 5.5No exploitEPSS 0%

    linux · linux kernelMar 27, 2018

  • CVE-2023-0572
    21Monitor

    Unchecked Error Condition in froxlor/froxlor

    MediumCVSS 5.3No exploitEPSS 0%

    froxlor · froxlorJan 29, 2023

All vulnerability classes