CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- abb ac800m (system 800xa), s+ operations, symphony plus mr (melody rack) +1 more +3 moreDenial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 618507.1 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-blockchain is missing a wall-clock upper bound on block timestamps8.1 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab6.5 Medium
- tandoor recipesTandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`7.3 High
- vllm, red hat ai inference server, ai inference server 3.2 +3 more +5 morevLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server6.5 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: integer overflow lead to OOB in HTJ2K decoder8.4 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0....7.5 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in...7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab6.5 Medium
- gallerycreator simply galleryWordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability9.9 Critical
- sandboxieSandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow6.9 Medium
- naturalintelligence fast-xml-parserfast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation5.9 Medium
- elastic kibanaImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service6.5 Medium
- htslibHTSlib CRAM decoder vulnerable to buffer overflow7.1 High
- htslibHTSlib BGZF index file reader has a heap buffer overflow7.1 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +19 more +21 moreundici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation7.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +18 more +20 moreundici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- owap defectdojoOWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service5.3 Medium
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability9.0 Critical
- pmqs compress::raw::zlib, compress\ +1 moreCompress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib9.8 Critical
- fasterxml jackson-core, red hat certificate system 10, enterprise linux 10 +2 more +4 morejackson-core: Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion8.7 High
- leont crypt::sysrandom::xs, crypt\ +1 moreCrypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes()7.5 High
- elastic kibanaImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service6.5 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- ruby zlibzlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because...2.9 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ddick crypt::urandom, crypt\ +1 moreCrypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom()7.5 High
- amd epyc™ 9005 series processorsImproper bound check within AMD CPU microcode can allow a malicious guest to write to host memory...5.3 Medium
- amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ embedded 9004 series processors +2 moreImproper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU...5.9 Medium
- mitsubishi electric corporation melsec iq-r series r08pcpu, melsec iq-r series r120pcpu, melsec iq-r series r16pcpu +1 more +3 moreInformation Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products8.8 High
- ibm cloud pak for business automationMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.5.4 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service5.3 Medium
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +3 more +5 moreReact Server Components have multiple Denial of Service Vulnerabilities7.5 High
- tanium discoverTanium addressed an improper input validation vulnerability in Discover.2.7 Low
- rockwell automation compactlogix® 5370Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability7.1 High
- sandboxie-plus sandboxieSandboxie 5.49.7 - Denial of Service4.6 Medium
- webssh for iosWebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service4.6 Medium
- splinterware idailydiaryiDailyDiary 4.30 - Denial of Service (PoC)4.6 Medium
- raimersoft rarmaradioRarmaRadio 2.72.8 - Denial of Service4.6 Medium
- dupterminatorDupTerminator 1.4.5639.37199 - Denial of Service4.6 Medium
- Show moreLoading…