CWE-392 · Input Validation and Logic
Missing Report of Error Condition
10CVEs
SortMost likely exploited
10 CVEs with CWE-392 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expectedOpenSSL · OpenSSL · CVSS 7.4 · 2025-02-11 | 7.4 | 1.9% | 2025-02-11 |
| CVE-2024-39697phonenumber panics on parsing crafted phonenumber inputswhisperfish · rust-phonenumber · CVSS 8.6 · 2024-07-09 | 8.6 | 0.7% | 2024-07-09 |
| CVE-2023-48430A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions…Siemens · SINEC INS · CVSS 2.7 · 2023-12-12 | 2.7 | 0.6% | 2023-12-12 |
| CVE-2017-2342SRX Series: MACsec failure to report errorsJuniper Networks · Junos OS · CVSS 8.1 · 2017-07-14 | 8.1 | 0.6% | 2017-07-14 |
| CVE-2026-20005Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine…Cisco · Cisco Secure Firewall Threat Defense (FTD) Software · CVSS 5.8 · 2026-03-04 | 5.8 | 0.6% | 2026-03-04 |
| CVE-2025-32743In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to…ConnMan · ConnMan · CVSS 9 · 2025-04-10 | 9.0 | 0.5% | 2025-04-10 |
| CVE-2025-26268DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not che…DragonflyDB · Dragonfly · CVSS 3.3 · 2025-04-17 | 3.3 | 0.4% | 2025-04-17 |
| CVE-2026-42246net-imap vulnerable to STARTTLS stripping via invalid response timingruby · net-imap · CVSS 7.4 · 2026-05-09 | 7.4 | 0.3% | 2026-05-09 |
| CVE-2025-59398The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created wi…EVerest · libocpp · CVSS 3.1 · 2025-09-15 | 3.1 | 0.2% | 2025-09-15 |
| CVE-2025-23270NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerabi…NVIDIA · Jetson Orin, IGX Orin and Xavier Devices · CVSS 7.1 · 2025-07-17 | 7.1 | 0.2% | 2025-07-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.