CWE-1287: Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software file manipulation4.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash8.7 High
- frroutingIn FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP...6.5 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreRisky command safeguards bypass in Dashboard Examples Hub8.1 High
- No product listedThe Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero...6.5 Medium
- intel killer, proset\/wireless +1 moreImproper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R)...4.3 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- google chromeInsufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a...6.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 High
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab3.5 Low
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- zscaler client connectorA URL parameter during login flow was vulnerable to injection. An attacker could insert a...8.2 High
- fedoraproject fedora, kubernetes +1 moreBypass of seccomp profile enforcement3.4 Low
- phoenix contact fl mguard 2102, fl mguard 4102 pci, fl mguard 4102 pcie +49 more +51 morePHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation5.3 Medium
- siemens sicam pas/pqs, sicam pas\/pqs +1 moreA vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All...7.5 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +166 more +168 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...5.5 Medium
- apereo phpcas, fedoraproject fedora +1 moreService Hostname Discovery Exploitation in phpCAS8.0 High
- socket socket.io-parserSocket.io - Improper type validation in attachment parsing10.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet7.5 High
- elabftwPrivilege escalation from administrator in eLabFTW4.9 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization7.1 High
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot6.5 Medium
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreA remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4...9.8 Critical
- etherpad, ether etherpad-lite +1 moreAdmin privilege escalation and arbitrary code execution via malicious *.etherpad imports9.9 Critical
- mongodb go driverSpecific cstrings input may not be properly validated in the Go Driver6.8 Medium