CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- imagination technologies graphics ddkGPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory7.8 High
- xiaomi game center applicationGame center application has code execution Vulnerability7.8 High
- arista networks eosOn affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being inst…5.3 Medium
- paragon software backup and recovery, disk wiper, hard disk manager +9 more +11 moreCVE-2025-02857.8 High
- paragon software backup and recovery, disk wiper, drive copy +9 more +11 moreCVE-2025-02868.4 High
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where...2.8 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where...2.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi300a +22 more +24 moreImproper access control in the ASP could allow a privileged attacker to perform an out-of-bounds...5.0 Medium
- amd ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processor with radeon™ graphics +11 more +13 moreImproper access control in the DRTM firmware could allow a privileged attacker to perform...3.0 Low
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper handling of invalid nested page table entries in the IOMMU may allow a privileged...5.3 Medium
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper access control in the IOMMU may allow a privileged attacker to bypass RMP checks,...2.5 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper access control in the fTPM driver in the trusted OS could allow a privileged attacker to...5.7 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.7...3.3 Low
- mediatek lr12, lr13, nr15 +4 more +6 moreIn Modem, there is a possible system crash due to improper input validation. This could lead to...7.5 High
- No product listedAn issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers...7.8 High
- linux, linux kernel +1 morenetdevsim: prevent bad user input in nsim_dev_health_break_write()5.5 Medium
- oppo store appOPPO Store app include remote account token hijacking and sensitive information leakage8.7 High
- ibm infosphere information serverIBM InfoSphere Information Server denial of service6.5 Medium
- order up online ordering systemBusiness Logic Error in RestApp Inc.'s Online Ordering System5.3 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280,...7.0 High
- axis communications ab p1428-e network camera, q6128-e ptz network camera +1 moreFlorent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet...7.5 High
- rcokwellautomation arena input analyzerInput Validation Vulnerability exists in Arena® Input Analyzer7.0 High
- realtek rtl8762ekf-evb firmwareAn issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows...4.3 Medium
- mitsubishi electric corporation electric cnc c80 series c80, electric cnc e70 series e70, electric cnc e80 series e80 +17 more +19 moreDenial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series5.9 Medium
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of Service5.3 Medium
- google chromeInsufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote...9.6 Critical
- circutor q-smt, q smt, q-smt firmware +2 moreAuthentication bypass vulnerability on CIRCUTOR Q-SMT10.0 Critical
- linux, linux kernel +1 moreext4: avoid resizing to a partial cluster size5.5 Medium
- zephyrproject zephyrBT: Unchecked user input in bap_broadcast_assistant6.3 Medium
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides multiple customizable input fields for the users to...5.6 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input5.3 Medium
- freebsdMultiple issues in ctl(4) CAM Target Layer8.8 High
- nvidia cuda toolkitNVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a...4.4 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in Power Management Firmware (PMFW) may allow an attacker with...5.0 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in SMU may allow an attacker with privileges and a compromised physical...2.3 Low
- microsoft windows 10, windows 11, windows server 2016 +2 more +4 moreDenial of Service in CLFS.sys6.8 Medium
- djangoproject djangoDjango vulnerable to denial-of-service attack7.5 High
- samsung exynos 2200 firmware, exynos 2400 firmware +1 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where...6.2 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +5 more +7 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100,...6.0 Medium
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted phonenumber inputs8.6 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreenic: Validate length of nl attributes in enic_set_vf_port7.3 High
- abb 800xa base, 800xa base system +1 moreCommunication DoS vulnerability6.9 Medium
- avast antivirusElevation of Privelage via symlinked file in Avast Antivirus7.3 High
- linux, linux kernel +1 moremac80211: fix skb length check in ieee80211_scan_rx()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: Fix not validating setsockopt user input7.1 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix not validating setsockopt user input7.1 High
- linux, linux kernel +1 moreBluetooth: hci_sock: Fix not validating setsockopt user input7.1 High
- the events calendar bookitWordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability6.5 Medium
- tips and tricks hq wp express checkout (accept paypal payments)WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability7.5 High
- Show moreLoading…