CWE-1286: Improper Validation of Syntactic Correctness of Input
The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedly7.5 High
- m-files serverDenial of Service condition in M-Files Server6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Specifically malformed SSL packet causes FPC crash8.7 High
- weblateWeblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration5.3 Medium
nodemailerRoot,@rootio/nodemailerRoot +1 moreDuplicate Advisory: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict7.5 High- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials6.3 Medium
- sauter ey-modulo 5 ecos 5 ecos504/505, ey-modulo 5 modu 5 modu524, ey-modulo 5 modu 5 modu525 +3 more +5 moreSauter: Improper Validation of user-controlled data8.8 High
- eclipse threadx netx duo, eclipse foundation netx duo +1 moreWeb http client: Unchecked Server-Side Malicious Packet Issue8.8 High
- amazon amazon.iondotnetDenial of Service issue in Amazon.IonDotnet8.7 High
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8.1 +1 more +3 moreNodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict7.5 High
- ibm planning analytics localIBM Planning Analytics Local information disclosure4.9 Medium
- textit phonenumbersgithub.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input6.9 Medium
- asterisk, sangoma certified asterisk +1 moreAsterisk remotely exploitable leak of RTP UDP ports and internal resources6.5 Medium
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability5.3 Medium
- brother industries, ltd ads-1250w, ads-1350w, ads-1700w +709 more +711 moreUnauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.7.5 High
- brother industries, ltd ads-2400n, ads-2800w, ads-3000n +219 more +221 moreUnauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.7.5 High
- acronis cyber protect 17, cyber protect cloud agent +1 moreDenial of service due to improper handling of malformed input. The following products are...7.5 High
- f5 f5os-a, f5os-c, f5os - appliance +1 more +3 moreF5OS-A/C CLI vulnerability8.3 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS...5.4 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS...6.5 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote...7.5 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote...6.3 Medium
- westermo weosWestermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.5.9 Medium
- ibm app connect enterprise certified container, app connect enterprise certified containers operands, app connect operator +2 moreIBM App Connect Enterprise Certified Container denial of service4.3 Medium
- finder fire safety erp/crm (new system)SQLi in Finder Fire Safety's Finder ERP/CRM (New System)7.5 High
- mediatek nr15, nr16, mediatek, inc. mt2735, mt2737, mt6833, mt6833p, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6875, mt6875t, mt6877, mt6877t, mt6877tt, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6895tt, mt6896, mt6980, mt6980d, mt6983, mt6983t, mt6985, mt6985t, mt6989, mt6989t, mt6990, mt8673, mt8791t, mt8795t, mt8798 +2 moreIn Modem, there is a possible memory corruption due to incorrect error handling. This could lead...6.5 Medium
- go jws, golang.org/x/oauth2 golang.org/x/oauth2/jws +1 moreUnexpected memory consumption during token parsing in golang.org/x/oauth27.5 High
- siemens simatic s7-1200 cpu 1211c ac/dc/rly, simatic s7-1200 cpu 1211c dc/dc/dc, simatic s7-1200 cpu 1211c dc/dc/rly +31 more +33 moreA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) ...7.1 High
- nlnet labs routinatorRoutinator crashes when illegal characters are present in manifest file names7.5 High
- axis os, os 2022, os 2024 +2 moreErik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi...3.8 Low
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...4.3 Medium
- openafsFileserver crash and possible information leak on StoreACL/FetchACL6.5 Medium
- eclipse jettyJetty URI parsing of invalid authority3.7 Low
- typo3Denial of Service in TYPO3 Bookmark Toolbar4.9 Medium
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API...6.5 Medium
- spipSPIP porte_plume Plugin Arbitrary PHP Execution9.8 Critical
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash8.7 High
- google https://github.com/google/nftables, nftables +1 moreImproper IPv4 and IPv6 byte order storage in github.com/google/nftables6.3 Medium
- finalwire aida64 business, aida64 engineer, aida64 network audit +1 more +3 moreAn issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7...7.8 High
- aten pe6208 firmwareImproper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to cause a partial DoS of web interface via HTTP POST re…6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash8.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets7.5 High
- hashgraph guardianDoS on IDS parsing of malformed Radius packets in Guardian before 23.4.18.2 High
- dji mini 3 pro** DISPUTED ** An Improper Input Validation vulnerability affecting the FTP service running on...3.0 Low
- @clerk expressExpress.js Open Redirect in malformed URLs6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message6.5 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 moreNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 High
- Show moreLoading…