CWE-253.

ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match

• ModSecurity
• CWE-253

Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability

• Adminer
• CWE-253

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-253
• CWE-1310

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

• CWE-252
• CWE-253

<0.6.0 · fixed in 0.6.0

bpf: Fix ld_{abs,ind} failure path analysis in subprogs

• Linux kernel
• CWE-253

MCU Firmware Update Authentication Bypass on Caliptra Core

• Caliptra Core Runtime Firmware
• CWE-253

Yubico webauthn-server-core: Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly…

• Yubico webauthn-server-core
• CWE-253

mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

• mutt
• CWE-253

Duplicate Advisory: uutils coreutils incorrectly handles exit codes when processing multiple files

• CWE-253

<0.6.0 · fixed in 0.6.0

Duplicate Advisory: uutils coreutils has an Incorrect Check of Function Return Value

• CWE-253

<0.6.0 · fixed in 0.6.0

uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

• Uutils coreutils
• CWE-253

Corosync: corosync: denial of service and information disclosure via crafted udp packet

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-253

The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get…

• Eclipse Foundation Eclipse ThreadX
• CWE-253

GNU Binutils prdbg.c tg_tag_type return value

• GNU Binutils
• CWE-252
• CWE-253

Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request

• asterisk
• CWE-253

Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64

• Apache Software Foundation Apache HTTP Server
• CWE-253

Windows Hyper-V Denial of Service Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• CWE-253

Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes

• envoy
• Denial of service
• CWE-253

Routinator terminates when RTR connection is reset too quickly after opening

• NLnet Labs Routinator
• CWE-253

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function.

• CWE-253

Denial of Service in Helper Process management

• squid
• Denial of service
• CWE-253

Authentication bypass in OpenText (Micro Focus) Enterprise Server

• OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server
• Authentication bypass
• CWE-253

Arbitrary file read

• Citrix ADC and Citrix Gateway
• CWE-253

ink! vulnerable to incorrect decoding of storage value when using `DelegateCall`

• CWE-253
• CWE-754

>=4.0.0, <4.2.1 · fixed in 4.2.1

Potential Captcha Validate Bypass in flask-session-captcha

• CWE-253
• CWE-394

<1.2.1 · fixed in 1.2.1

Incorrect Check of Function Return Value in Skytable

• skytable
• CWE-252
• CWE-253

F2fs-Tools: An exploitable information disclosure vulnerability exists in the dev_read functionality…

• F2fs-Tools
• CWE-253

keycloak-connect and keycloak-js improperly handle invalid tokens

• CWE-253

>=2.5.0, <3.1.0 · fixed in 3.1.0