CWE-392 · 9 records
Missing Report of Error Condition
CVEs in this class
9 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2025-32743No exploit | In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in aconnman · connman · CWE-392 | Critical9.0 | — | 0.5% | Apr 10, 2025 |
32Monitor | CVE-2017-2342No exploit | SRX Series: MACsec failure to report errorsjuniper · junos · CWE-392 | High8.1 | — | 0.5% | Jul 17, 2017 |
30Monitor | CVE-2026-42246No exploit | net-imap vulnerable to STARTTLS stripping via invalid response timingruby-lang · net\ · CWE-392 | High7.6 | — | 0.3% | May 9, 2026 |
28Monitor | CVE-2025-23270No exploit | NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive invidia · jetson orin, igx orin and xavier devices · CWE-392 | High7.1 | — | 0.2% | Jul 17, 2025 |
26Monitor | CVE-2024-12797No exploit | RFC7250 handshakes with unauthenticated servers don't abort as expectedopenssl · openssl · CWE-392 | Medium6.3 | — | 2.5% | Feb 11, 2025 |
26Monitor | CVE-2025-26268No exploit | DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command.dragonflydb · dragonfly · CWE-392 | Medium6.5 | — | 0.4% | Apr 17, 2025 |
23Monitor | CVE-2026-20005No exploit | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attackercisco · cyber vision · CWE-392 | Medium5.8 | — | 0.5% | Mar 4, 2026 |
12Monitor | CVE-2025-59398No exploit | The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, becaueverest · libocpp · CWE-392 | Low3.1 | — | 0.2% | Sep 15, 2025 |
10Monitor | CVE-2023-48430No exploit | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).siemens · sinec ins · CWE-392 | Low2.7 | — | 0.5% | Dec 12, 2023 |
- CVE-2025-3274336Monitor
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a
CriticalCVSS 9.0No exploitEPSS 0%connman · connmanApr 10, 2025
- CVE-2017-234232Monitor
SRX Series: MACsec failure to report errors
HighCVSS 8.1No exploitEPSS 0%juniper · junosJul 17, 2017
- CVE-2026-4224630Monitor
net-imap vulnerable to STARTTLS stripping via invalid response timing
HighCVSS 7.6No exploitEPSS 0%ruby-lang · net\May 9, 2026
- CVE-2025-2327028Monitor
NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive i
HighCVSS 7.1No exploitEPSS 0%nvidia · jetson orin, igx orin and xavier devicesJul 17, 2025
- CVE-2024-1279726Monitor
RFC7250 handshakes with unauthenticated servers don't abort as expected
MediumCVSS 6.3No exploitEPSS 2%openssl · opensslFeb 11, 2025
- CVE-2025-2626826Monitor
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command.
MediumCVSS 6.5No exploitEPSS 0%dragonflydb · dragonflyApr 17, 2025
- CVE-2026-2000523Monitor
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker
MediumCVSS 5.8No exploitEPSS 0%cisco · cyber visionMar 4, 2026
- CVE-2025-5939812Monitor
The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, becau
LowCVSS 3.1No exploitEPSS 0%everest · libocppSep 15, 2025
- CVE-2023-4843010Monitor
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
LowCVSS 2.7No exploitEPSS 0%siemens · sinec insDec 12, 2023