CWE-1287: Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- meshtastic meshtastic-androidMeshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted5.3 Medium
- red hat builds for red hat openshift, custom metric autoscaler operator for red hat openshift, multicluster global hub +24 more +26 moreGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results3.7 Low
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation6.5 Medium
- axis communications ab osA Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly...4.3 Medium
- rrwo net::cidr::setNet::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on…6.5 Medium
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches7.5 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated,...6.0 Medium
- kyvernoKyverno vulnerable to bypass of policy rules that use namespace selectors in match statements8.6 High
- mattermost, mattermost server +1 moreWebapp DoS via malicious retrospective post in Playbooks6.5 Medium
- @clerk fastify, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 more +3 morefastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header7.5 High
- @clerk fastifyFastify vulnerable to invalid content-type parsing, which could lead to validation bypass7.5 High
- hcl software bigfix platformHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack5.6 Medium
- axis os, os 2022, os 2024 +2 more51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...4.3 Medium
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52...6.5 Medium
- mattermost, mattermost mobile +1 moreDenial of Service Via Malicious GIF6.5 Medium
- axis communications ab osDzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param...5.3 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreKeylime: keylime registrar dos due to incompatible database entry handling4.3 Medium
- No product listedIn Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the...6.8 Medium
- avaya spacesAvaya Spaces HTML injection (HTMLi) Vulnerability7.3 High
- sap se approuter node.js packageAuthentication bypass via authorization code injection in SAP Approuter8.1 High
- ruby net-imapNet::IMAP vulnerable to possible DoS by memory exhaustion6.5 Medium
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 morePartial Denial of Service (DoS) in MobSF4.8 Medium
- opentext™ content management (extended ecm)A remote code vulnerability has been discovered in OpenText™ Content Management.5.4 Medium
- mattermost, mattermost mobile +1 moreMobile crash via object that can't be cast to String in Attachment Field6.5 Medium
- mattermost, mattermost server +1 moreWebapp crash via object that can't be cast to String in Attachment Field6.5 Medium
- mattermost, mattermost mobile +1 moreMobile crash via file with specially crafted filename4.3 Medium
- mattermost, mattermost server +1 moreInsufficient Input Validation on Post Props6.5 Medium
- mattermost, mattermost server +1 moreInsufficient Input Validation on Post Props6.5 Medium
- mattermost, mattermost mobile +1 moreInsufficient Input Validation on Post Props6.5 Medium
- mattermost, mattermost mobile +1 moreInsufficient Input Validation on Post Props6.5 Medium
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform7.5 High
- mattermost, mattermost server +1 moreDoS via custom post type for sysconsole plugin readers4.3 Medium
- lenovo filez clientAn improper parsing vulnerability was reported in the FileZ client that could allow a crafted...7.6 High
- mattermost, mattermost server +1 moreDoS via lack of type validation in Calls6.5 Medium
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDefault Credentials9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreData Validation / Sanitization9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreCredentails Disclosure8.7 High
- moxa eds-405a series, eds-408a series, eds-505a series +45 more +47 moreDenial-of-Service Vulnerability6.9 Medium
- mitsubishi electric corporation melsec iq-f series fx5-enet, melsec iq-f series fx5-enet/ip, mitsubishi electric melsec iq-f series fx5-enet ip +2 moreDenial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP Module7.5 High
- moodleMoodle: arbitrary file read risk through pdftex7.5 High
- enel x juicebox pro 3.0 22kw cellular, enelx waybox pro firmware +1 moreInsecure loose comparison in Enel X JuiceBox4.2 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA)...8.6 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance...7.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash8.7 High
- nt-ware micard plus ble, micard plus ci, rfideas micard plus ble firmware +1 more +3 moreMultiple MiCard PLUS card reader dropped characters5.3 Medium
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 moreJelly Template Injection Vulnerability in ServiceNow UI Macros9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreremote code execution9.4 Critical
- openvpnOpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to...9.1 Critical
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite improper input validation7.1 High
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreVulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)9.0 Critical
- Show moreLoading…