CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- nilfs-dev nilfs-utilsNILFS utilities - Undefined Behavior and Out-of-Memory via Unvalidated s_log_block_size6.7 Medium
- openbsdsppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass...5.8 Medium
- fastapiexpert python-multipartPython-Multipart: Negative Content-Length in parse_form buffers the entire body in memory3.7 Low
- wp swings upsell order bump offer for woocommerceWordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability7.5 High
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability7.5 High
- magepeople inc. wpeventlyWordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability7.5 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability6.5 Medium
- filebrowserFile Browser: DoS Vulnerability on Public Login API6.5 Medium
- cellopoint celloosCellopoint｜CelloOS - Improper Access Control8.7 High
- connectwise screenconnectIn ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation...4.7 Medium
- sahlberg libnfslibnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer...7.1 High
- linux, linux kernel +1 moremm/damon/core: disallow non-power of two min_region_sz on damon_start()5.5 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions7.5 High
- shapedplugin, llc product slider pro for woocommerceWordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability10.0 Critical
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed ldap password policy response4.9 Medium
- canonical ubuntu linuxIncorrect validation of field size in Ubuntu Linux AppArmor notification responses3.3 Low
- ibm openbmcOpen BMC Denial of Service5.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creation7.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: privilege escalation due to oversized subject_token jwt6.8 Medium
- ibm cloud apm, advanced private, cloud apm, base private, cloud application performance managemen +2 moreThere are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.6.5 Medium
- ads by wpquads by wpquadsWordPress Ads by WPQuads plugin <= 3.0.2 - Bypass Vulnerability vulnerability6.5 Medium
- ads by wpquads by wpquadsWordPress Ads by WPQuads plugin <= 3.0.2 - Broken Authentication vulnerability6.5 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreOut-of-bounds Write in CODESYS Control8.7 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 moreInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 High
- ledger flex, nano x, stax +2 moreLedger Nano X, Flex, Stax MCU Firmware Update Denial of Service5.1 Medium
exifreadernpmExifReader is vulnerable to denial of service via crafted ICC `mluc` tag8.7 High- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: CPU Exhaustion in Avro Decoder8.7 High
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: Integer Overflow in Avro Decoder8.7 High
github.com/hamba/avro/v2Go,github.com/iskorotkov/avro/v2Go +1 moreiskorotkov/avro: Denial-of-Service Vulnerability in Decoder8.7 High- givanz vvvebVvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals7.5 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +9 more +11 moreInsufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...1.8 Low
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +1 more +3 moreInsufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...1.8 Low
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- kysely-org kyselyKysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`7.5 High
oxidize-pdfcrates.io,OxidizePdf.NETNuGet +1 moreoxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)4.3 Medium- honoHono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()3.8 Low
- jules colle conditional fields for contact form 7Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncontrolled Resource Consumption8.7 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...5.9 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...7.5 High
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries6.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations5.3 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: information disclosure via heap overread in rsa key exchange8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: certificate validation bypass due to oversized subject alternative name8.2 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreFlaw in the updateUser Command May Allow Unauthorized Configuration Change5.3 Medium
- ibm db2IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index6.5 Medium
- nimiq nimiq-block, proof-of-stake +1 morenimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation9.6 Critical
- samsung oneImproper validation of STRING tensor offsets could allows malformed string metadata to trigger...6.6 Medium
- openbsdIn OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a...4.3 Medium
- rust-opensslrust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length1.7 Low
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause...5.3 Medium
- Show moreLoading…