CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- sailpoint identity security cloudSailPoint Identity Security Cloud Improper Access Control6.5 Medium
- rapid7 insight agent, insightvm +1 moreRapid7 Insight Agent Sensitive Key Exposed To Local Users6.8 Medium
- lenovo windows 7 and 8 pc preloadsA vulnerability was reported in a system recovery bootloader that was part of the Lenovo...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn SecurityCommand message after as security has been actived., there is a possible improper...5.5 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splitting7.3 High
- sailpoint identityiqAccess Request for Entitlement Values with Leading/Trailing Whitespace7.1 High
- zoom, zoom communications inc. clients, zoom meeting software development kit +3 more +5 moreZoom Clients - Improper Input Validation5.4 Medium
- hitachi energy relion670, hitachienergy relion 650 firmware, relion 670 firmware +1 more +3 moreA vulnerability exists in the input validation of the GOOSE messages where out of range values...6.5 Medium
- checkmkDoS via long hostnames2.7 Low
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received6.5 Medium
- input-output-hk hydraHydra's contestation period in head datum can be modified during Close transaction, allowing malicious participant to freely modify the contestation deadline8.1 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial-of-service in django.utils.text.Truncator7.5 High
- whisperfish blurhash-rsblurhash panics on parsing crafted inputs8.6 High
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted RF3966 inputs8.6 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 High
- card holder management system project holder management system, sourcecodester card holder management system +1 moreSourceCodester Card Holder Management System Minus Value unknown vulnerability4.3 Medium
- omron cj2h cpu unit, cj2m cpu unit, omron corporation cs/cj series ethernet/ip unit +13 more +15 moreDenial-of-service (DoS) vulnerability due to improper validation of specified type of input issue...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of unstrict data verification and parameter check. Successful exploitation of this...7.5 High
- jcvi project jcvijcvi vulnerable to Configuration Injection due to unsanitized user input7.1 High
- cesanta mongooseThe HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers.7.5 High
- enhancesoft osticketA denial of service attack might be launched against the server if an unusually lengthy password ...7.5 High
- pmmp pocketmine-mpPocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash7.1 High
- actionlauncher action launcherAn issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via...7.8 High
- google androidIn several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access...5.5 Medium
- google android, mediatek, inc. mt6765, mt6768, mt8768 +1 moreIn m4u, there is a possible out of bounds write due to improper input validation. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt8321, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797 +1 moreIn ril, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt8183, mt8195 +1 moreIn apu, there is a possible out of bounds read due to a missing bounds check. This could lead to...5.5 Medium
- google android, mediatek, inc. mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt8183, mt8195 +1 moreIn apu, there is a possible out of bounds read due to a missing bounds check. This could lead to...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreMultiple validation issues were addressed with improved input sanitization. This issue is fixed...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...5.5 Medium
- cltphpCLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template...8.1 High
- nvidia vgpu software (guest driver - windows), nvidia cloud gaming (guest driver - windows), virtual gpu +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver...2.0 Low
- nvidia vgpu software (guest driver - windows), nvidia cloud gaming (guest driver - windows), virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...2.0 Low
- mozilla firefoxDue to URL previews in the network panel of developer tools improperly storing URLs, query...8.8 High
- c-ares, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 High
- gitlabA lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7...6.5 Medium
- ipfs go-bitfieldDenial of service when feeding malformed size arguments in go-bitfield5.9 Medium
- huawei emui, harmonyos +1 moreThe geofencing kernel code does not verify the length of the input data. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe geofencing kernel code has a vulnerability of not verifying the length of the input data....7.5 High
- arista eosFor certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of…5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot5.5 Medium
- google androidIn Condition of Condition.java, there is a possible way to grant notification access due to...7.8 High
- open-xchange appsuiteOX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body...5.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request...5.3 Medium
- demonisblack demon image annotationdemon image annotation <= 5.0 - Improper Input Restriction Validation6.5 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, ruggedcom rm1224 lte\(4g\) eu firmware +261 more +263 moreAffected devices do not check the TFTP blocksize correctly. This could allow an authenticated...5.1 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...4.9 Medium
- Show moreLoading…