CWE-1287: Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- mattermost, mattermost server +1 moreDenial of service via malformed User-Agent header in getBrowserVersion4.3 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability7.4 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- miraheze tsportalTSPortal: Anyone can forge self-deletion requests of any user8.4 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code8.8 High
- postgresqlPostgreSQL oidvector discloses a few bytes of memory4.3 Medium
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios affected by Denial of Service via __proto__ Key in mergeConfig7.5 High
- cisco roomos software, telepresence endpoint software (tc/ce) +1 moreCisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability7.5 High
- microsoft 365 copilotM365 Copilot Information Disclosure Vulnerability9.3 Critical
- oracle graalvm, graalvm for jdk, jdk +19 more +21 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...7.4 High
- meshtastic firmwareMeshtastic firmware allows forged DMs with no PKC to show up as encrypted5.3 Medium
- mattermost, mattermost server +1 moreDoS in Calls plugin via malformed UTF-8 in WebSocket request6.5 Medium
- mattermost, mattermost server +1 moreMattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking3.0 Low
- jbl boombox 2, boombox 3, flip 5 +4 more +6 moreJBL: Improper validation of ICM field in connection requests6.5 Medium
- kde kdeconnectIn KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could...4.3 Medium
- mediatek nr15, mediatek, inc. mt2735, mt6833, mt6833p, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6875, mt6875t, mt6877, mt6877t, mt6877tt, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8673, mt8675, mt8676, mt8678, mt8755, mt8771, mt8791, mt8791t, mt8792, mt8793, mt8795t, mt8797, mt8798, mt8863, mt8873, mt8883, mt8893 +1 moreIn Modem, there is a possible system crash due to a logic error. This could lead to remote denial...6.5 Medium
- fluentbit fluent bitCVE-2025-129779.1 Critical
- janitza umg 96-pa, umg 96-pa-mid+ +1 moreDoS via Modbus Read Command7.5 High
- free5gcFree5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API6.5 Medium
- axis communications ab osThe VAPIX API port.cgi did not have sufficient input validation, which may result in process...4.3 Medium
- axis osAn ACAP configuration file has improper permissions and lacks input validation, which could...6.7 Medium
- axis osACAP applications can gain elevated privileges due to improper input validation, potentially...6.7 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability6.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2022, 23h2 edition (server core installation) +5 more +7 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- mediatek software development kit, mediatek, inc. mt6890, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...8.8 High
- mattermost, mattermost desktop +1 moreMattermost Desktop App crashes when clicking on malformed external URL3.5 Low
- element-hq synapseSynapse: Invalid device keys degrade federation functionality5.3 Medium
- cisco iosA vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker...7.7 High
- abb flxeonAuthenticated File Disclosure/Delete7.5 High
- abb flxeonRemote Code Execution7.5 High
- sap se landscape transformation replication serverMissing input validation vulnerability in SAP Landscape Transformation Replication Server8.1 High
- sap se s/4hana (private cloud or on-premise)Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)8.1 High
- mattermost, mattermost server +1 moreNil pointer dereference in bulk import crashes server4.9 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion8.5 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability7.7 High
- rockwell automation flex 5000 i/oRockwell Automation FLEX 5000 I/O - Module Fault8.7 High
- rockwell automation flex 5000 i/oRockwell Automation FLEX 5000 I/O - Module Fault8.7 High
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...6.7 Medium
- mattermost confluence, confluence plugin +1 moreUnexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 High
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis denial of service6.2 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check8.2 High
- nokia single ranSOAP message input validation fault could in theory cause OAM service resource exhaustion2.0 Low
- No product listedNet::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses6.5 Medium
- Show moreLoading…