CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mt/ds +72 more +74 moreInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module9.1 Critical
- ibm tivoli monitoringIBM Tivoli Monitoring code execution9.8 Critical
getformwork/formworkPackagistFormwork improperly validates input of User role preventing site and panel availability8.2 High- ni labviewOut of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW8.4 High
- ni labviewOut of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW8.4 High
- ni labviewOut of bounds read in HeapObjMapImpl.cpp in NI LabVIEW8.4 High
- freebsdbhyve(8) NVMe driver to guest-induced infinite loops.6.5 Medium
- freebsdbhyve(8) infinite loop in the hda audio driver7.5 High
- nvidia cuda toolkitNVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line...3.3 Low
- freebsdbhyve(8) privileged guest escape via TPM device passthrough8.4 High
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
eth-abiPyPIeth-abi is vulnerable to recursive DoSNo scoregithub.com/cosmos/cosmos-sdkGoASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`5.3 Medium- squid-cache squidSQUID-2023:4 Denial of Service in SSL Certificate validation8.6 High
- huawei emui, harmonyos +1 moreVulnerability of input parameters being not strictly verified in the PMS module. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of input parameters being not strictly verified in the PMS module. Successful...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.6.5 Medium
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreArbitrary Files can be installed in the Setting Data Import function of Office / Small Office...2.2 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.6.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet7.5 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +15 more +17 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions)....5.3 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- nvidia cuda toolkitNVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this...7.8 High
- siemens simatic mv400 family, simatic mv420 sr-b body firmware, simatic mv420 sr-b firmware +5 more +7 moreA vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The...7.5 High
- microsoft defender, security essentials, system center 2012 endpoint protection +3 more +5 moreMicrosoft Defender Remote Code Execution Vulnerability7.8 High