CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- frroutingA buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the...7.8 High
- frroutingA buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the...7.8 High
- frroutingBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input...7.8 High
- acquia mauticImproper regex in htaccess file7.2 High
- google androidIn setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a...5.5 Medium
- istioUnauthenticated control plane denial of service attack in Istio7.5 High
- debian linux, linux kernel +1 moreAn issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10...5.5 Medium
- pcf2bdf project pcf2bdfA segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to...5.5 Medium
- microweber, microweber microweber/microweber +1 moreImproper Validation of Specified Quantity in Input in microweber/microweber5.4 Medium
- custom popup builder project popup builder, unknown popup | custom popup builder +1 morePopup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service7.5 High
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- google tensorflowAbort caused by allocating a vector that is too large in Tensorflow6.5 Medium
- sealevel seaconnect 370w firmwareA stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel...10.0 Critical
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Validation of Specified Quantity in Input in dolibarr/dolibarr4.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received6.5 Medium
- pypa pipenv, fedoraproject fedora +1 morePipenv's requirements.txt parsing allows malicious index url in comments8.0 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Validation of Specified Quantity in Input in dolibarr/dolibarr4.3 Medium
- digitalbazaar forgeForge: AES-GCM authentication bypass via unvalidated tagLength option5.9 Medium
- digitalbazaar forgeForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count7.5 High
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U Router - Stack-based buffer overflow8.0 High
- giftrans project giftrans, debian linux +1 moreThe giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value...7.1 High
- open5gsIn Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.7.5 High
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, pluscontrol 1st gen +12 more +14 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...8.2 High
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, pluscontrol 1st gen +10 more +12 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...7.5 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +6 more +8 moreAn issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent...9.8 Critical
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyr7.0 High
- parity frontierTransaction validity oversight in pallet-ethereum5.3 Medium
- google tensorflowIncomplete validation in `MaxPoolGrad` in TensorFlow5.5 Medium
- google tensorflowMissing validation in shape inference for `Dequantize` in TensorFlow5.5 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....9.8 Critical
- nvidia virtual gpu manager, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU...7.8 High
- nvidia virtual gpu manager, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which...7.8 High
- nvidia virtual gpu manager, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU...7.8 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is...7.1 High
- nvidia virtual gpu software, virtual gpu manager +1 moreNVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in...7.1 High
- eclipse hono, the eclipse foundation eclipse hono +1 moreImproper Validation of Specified Quantity in Input in Eclipse Hono7.5 High
- openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant name6.5 Medium
- linux kernel, canonical ubuntu linux, opensuse +5 more +7 moreThe rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol...7.8 High
- varnish.projects.linpro varnish** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitizing non-printable...5.0 Medium
- bluez bluez-libs, bluez-utils, fedoraproject fedora +2 moresrc/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3...7.5 High
- microsoft windows xp, windows server 2003 +1 moreMicrosoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the...7.1 High