CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- sysax multi serverSysax Multi Server 6.95 - 'Password' Denial of Service (PoC)5.1 Medium
- color iccdeviccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()8.8 High
- silabs.com z-wave protocol controllerSilicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read5.3 Medium
- masaakitanaka booking packageWordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability7.5 High
- elastic filebeatFilebeat Improper Validation of Specified Index, Position, or Offset in Input6.5 Medium
- kristapsdz openrsyncopenrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client...5.3 Medium
- ibm cognos controller, controller +1 moreIBM Controller Denial of Service6.5 Medium
- cashu nutshellNUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts)...9.1 Critical
- qtImproper validation of <img> tag size in Text component parser8.7 High
- nvidia triton inference serverNVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper...7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreTime-series operations may cause internal BSON size limit to be exceed7.1 High
- amd alveo™ v80 compute accelerator, versal™ ai core series, versal™ ai edge series +5 more +7 moreThe Secure Flag passed to Versal™ Adaptive SoC’s Arm® Trusted Firmware for Cortex®-A processors ...1.0 Low
- amd kria™ som, zynq™ ultrascale+™ mpsocs, zynq™ ultrascale+™ rfsocs +2 moreThe security state of the calling processor into Arm® Trusted Firmware (TF-A) is not used and...8.6 High
- n-able n-centralN-central unauthenticated sessionID generation6.9 Medium
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mr/es-a +80 more +82 moreDenial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU module5.3 Medium
- ibm cloud pak for business automationIBM Business Automation Insights improper input validation6.5 Medium
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmeta4.4 Medium
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM bd process vulnerability8.7 High
- ywxbear php basic bookstore website, php-bookstore-website-example +1 moreywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input6.9 Medium
- amd kria(tm) som, zynq ultrascale+ mpsocs, zynq ultrascale+ rfsocs +2 moreIn AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime...6.6 Medium
- kde kritaIn KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer...6.7 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has Improper Validation of Specified Quantity in Input6.9 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab6.5 Medium
- convers lab wp smartpayWordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability7.5 High
- amd instinct™ mi300a, instinct™ mi300x +1 moreImproper input validation in AMD Power Management Firmware (PMFW) could allow a privileged...6.0 Medium
- linux, linux kernel +1 moremm/damon/ops-common: ignore migration request to invalid nodes5.5 Medium
- calliko bonus for wooWordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability5.3 Medium
- opentext self service password resetAuthentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset7.3 High
- netscaler adc, gateway +1 moreImproper access control on the NetScaler Management Interface8.7 High
- No product listedAn issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In...9.8 Critical
- tesla wall connector, wall connector firmware +1 moreTesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability8.8 High
- synck graphica real-time bus tracking systemImproper validation of specified quantity in input issue exists in Real-time Bus Tracking System...5.3 Medium
- parkingdoorIncorrect authentication in ParkingDoor5.9 Medium
- ruby resolvresolv vulnerable to DoS via insufficient DNS domain name length validation7.5 High
- citrix netscaler console, netscaler sdx, iidk-the-actual console +1 more +3 moreNetScaler Console and NetScaler SDX (SVM) - Arbitrary file read6.9 Medium
- citrix netscaler gateway, netscaler adc, citrix netscaler application delivery controller +2 moreNetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface8.7 High
- cozmoslabs profile builderWordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability4.3 Medium
- mauticPredictable Page Indexing Might Lead to Sensitive Data Exposure6.5 Medium
- arista networks eosn affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…2.6 Low
- arista networks eosOn affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the r…7.5 High
- cisco ios xe catalyst sd-wan, ios xe sd-wan +1 moreCisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability4.3 Medium
- rt-labs p-netAn Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an...5.3 Medium
- matthewwithanm markdownify, python-markdownify +1 moremarkdownify allows large headline prefixes such as <h9999999>, which causes memory consumption2.9 Low
- mitsubishi electric corporation cc-link ie tsn analog-digital converter module nz2gn2b-60ad4, cc-link ie tsn analog-digital converter module nz2gn2s-60ad4, cc-link ie tsn digital-analog converter module nz2gn2b-60da4 +46 more +48 moreImproper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric...7.5 High
- gobgpGoBGP crashes in the flowspec parser6.8 Medium
- gobgpGoBGP does not properly check the input length4.3 Medium
- librawIn LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp...2.9 Low
- namelessmc namelessNamelessMC Has Lack of Length Validation for s Parameter in GET Requests7.5 High
- gnome libxml2In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has...2.9 Low
- Show moreLoading…