CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation thriftApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements8.7 High
- peazipOut-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive8.4 High
pgvectorAlmaLinux,pgauditAlmaLinux,pgaudit-debuginfoRed Hat +55 more +57 morepgvector buffer overflow in IVFFlat index build8.8 High- accellion kiteworks, kiteworks core +1 moreKiteworks Core Improper Validation of Specified Quantity in Input4.9 Medium
- wpfunnels creator lmsWordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability5.4 Medium
- watchguard fireware, fireware os +1 moreFireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service8.2 High
- eclipse foundation threadx levelxOut-of-bounds Write via NAND Metadata Parsing at Mount in LevelX8.6 High
- eclipse foundation threadxOut-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader6.9 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreUnauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS5.3 Medium
- noderedis redis-parserredis-parser through 3.0.0 Denial of Service via Invalid Array Length8.7 High
- forcepoint security engine (ngfw)Security Policy Bypass in Forcepoint Security Engine (NGFW)7.9 High
- aws s2n-quicPotential denial of service when configured to send Retry packets in s2n-quic8.7 High
- mikrotik routerosMikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI8.7 High
- zenhive mppSession voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free7.1 High
- 1panel-dev cordyscrmCordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`5.7 Medium
- 7rulnik source-map-jssource-map-js through 1.2.1 Event Loop Denial of Service8.7 High
- ibm controllerMultiple vulnerabilities in IBM Controller5.4 Medium
- bluekitchen gmbh btstackBlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds Write7.0 High
- arista networks eosSecurity Advisory 01716.0 Medium
- oracle corporation applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...7.5 High
- http4sHttp4s: WebSocket decoder accepts negative length, causing infinite decode loop7.5 High
- cisco secure email, secure email and web manager +1 moreCisco Secure Email Gateway Security Hardening Release7.5 High
- samsung exynos 8890 firmwareAn issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto...5.7 Medium
- tdunning t-digestt-digest 3.1 through 3.3 Denial of Service via Unvalidated Length Fields in MergingDigest.fromBytes8.7 High
- google chromeImproper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a...9.6 Critical
- paytr payment and electronic money institution inc. virtual pos iframe api whmcs moduleImproper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module7.5 High
- No product listedAn issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC...8.8 High
- eclipse foundation ankaiosIn Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by...6.8 Medium
- zenhive mppUnbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation8.3 High
- zenhive mppUnbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning8.3 High
- ash-project ashAsh string length constraints count graphemes, so a combining-mark string of any size passes max_length5.9 Medium
- erlang otpeldap does not bound the port component of a referral URL before integer conversion6.3 Medium
- erlang otpsnmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields6.3 Medium
- erlang otpuri_string does not bound the port component of a URI before integer conversion6.9 Medium
- erlang otphttpc does not bound server-supplied numeric header values before integer conversion6.3 Medium
- ash-project ashNon-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal2.1 Low
- tornadoweb tornadoTornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop7.5 High
- silk themes newspapers xWordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability10.0 Critical
- red hat build of quarkus 3.27.5.sp1, build of quarkus 3.33.3.sp1 +1 moreIo.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals7.5 High
libhtml-formfu-perlDebian,perl-HTML-FormFuMageia +1 moreHTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements7.5 High- watchguard fireware osFireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service8.7 High
- watchguard fireware osFireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service6.9 Medium
- servicenow ai platformSandbox Escape in ServiceNow AI Platform10.0 Critical
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop6.5 Medium
- imagination technologies graphics ddkGPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory7.8 High
- torproject tortor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream...3.7 Low
- oracle siebel crm, oracle corporation siebel crm integration +1 moreVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). ...7.4 High
- opensearch dashboards, aws amazon opensearch service +1 moreUncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards8.7 High
- codepeople appointment hour bookingWordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability6.5 Medium
libdbi-perlDebian,perl-dbiAlpaquita,perl-DBI-debuginfoRed Hat +1 more +3 moreDBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse9.1 Critical- Show moreLoading…