CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- circl vulnerability-lookup Vulnerability-Lookup: memory amplification through webhook payload template format specifiers 5.3 Medium
- thalesgroup safenet authentication client sis token engine Stack-based buffer overflow in SafeNet Authentication Client SIS token engine 7.0 High
- leejet stable-diffusion.cpp stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name 7.8 High
- stmicroelectronics st-mems-android-linux-sensors-hal STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the... 4.2 Medium
- samsung exynos 1080, samsung semiconductor exynos 9110, exynos modem 5123 +2 more +4 more In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. No score
- samsung exynos 1080, samsung semiconductor exynos 9110, exynos modem 5123 +2 more +4 more A memory corruption vulnerability caused by improper validation of messages No score
- ayecode ltd payment forms, buy now buttons, and invoicing system | getpaid GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass 8.7 High
- mediatek, inc. mediatek chipset In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... 5.3 Medium
- elixir-lang elixir Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir 6.9 Medium
- elixir-lang elixir Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir 6.3 Medium
- apache software foundation kafka Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches 6.5 Medium
- watchguard fireware os Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution 9.5 Critical
- dcmjs-org dcmjs dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS 9.1 Critical
- lxsmnsyc seroval Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) 7.5 High
- zip-rs zip2 zip: AES Entry HMAC Authentication Bypass on Premature EOF 6.5 Medium
- No product listed An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of... 4.3 Medium
- eclipse foundation threadx Module Manager object lookup validates one byte of a module's search name 6.9 Medium
- eclipse foundation threadx - netx duo Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 9.3 Critical
- eclipse foundation threadx - filex FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image 7.8 High
- mamunur rashid classified listing WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability 4.3 Medium
- nic bird An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an... 2.3 Low
- magepeople inc. booking and rental manager WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability 5.3 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption 5.3 Medium
- juniper networks junos os evolved Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled 7.1 High
- curl server-set cookie aborts cookie jar load 8.1 High
- ayuhito modern-tar modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field 8.7 High
- videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability 4.3 Medium
- wp desk flexible quantity – measurement price calculator for woocommerce WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability 5.3 Medium
- videowhisper micropayments WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability 5.4 Medium
- apache software foundation datasketches Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch 9.8 Critical
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption 5.1 Medium
- vllm vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features 6.5 Medium
- villatheme buildkit – product builder for woocommerce – custom pc builder WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability 5.3 Medium
- magepeople inc. taxi booking manager for woocommerce WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability 5.3 Medium
- themeum kirki WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability 8.2 High
- bytecodealliance wasmtime Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS 5.9 Medium
- apache software foundation thrift Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) 8.7 High
- apache software foundation thrift Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up 8.2 High
- apache software foundation thrift Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound 8.2 High
- Show olderLoading…