CWE-1288: Improper Validation of Consistency within Input
The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse foundation keypont - gose JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11) 6.3 Medium
- erlang otp TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl 8.2 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised 8.7 High
- bsv-blockchain @bsv/wallet-toolbox, @bsv/wallet-toolbox-client, @bsv/wallet-toolbox-mobile +2 more `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage) 8.7 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows TCP/IP Security Feature Bypass Vulnerability 7.5 High
- the tcpdump group libpcap OOBR in rpcap client in libpcap before 1.10.7 5.0 Medium
- calcprogrammer1 openrgb OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite 8.8 High
- cvat-ai cvat CVAT: Denial of service with regards to automatic annotation 5.3 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check 3.4 Low
- red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Secure Kernel Mode Elevation of Privilege Vulnerability 7.8 High
- red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 more Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email 4.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 more RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() 7.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 more Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604 4.2 Medium
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 more smb: client: validate the whole DACL before rewriting it in cifsacl 8.8 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 more OpenStack Keystone has an Incorrect Authorization Issue 7.9 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 more drm/amd/display: Do not skip unrelated mode changes in DSC validation 7.8 High
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place 7.8 High
- avibia avibialine configurator 5.0, innomic vibroline configurator 4.0, vibroline configurator 5.0 +2 more Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB 7.7 High
- drupal reverse proxy header, reverse proxy header project proxy header +1 more Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111 5.3 Medium
- arcinfo pcvue Improper validation of payload elements 7.6 High
- vllm vLLM has a Weakness in MultiModalHasher Image Hashing Implementation 4.2 Medium
- gitlab Improper Validation of Consistency within Input in GitLab 6.8 Medium
- amazon tough Root metadata version not validated in tough 5.7 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more MongoDB Server secondaries may crash due to forced index constraints 6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash 8.7 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.9 for rhel 8 +9 more +11 more 389-ds-base: malformed userpassword hash may cause denial of service 5.7 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos... 6.7 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos... 6.7 Medium
- jetbrains teamcity In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the... 4.1 Medium
- jetbrains teamcity In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter 7.4 High
- dell idrac8, integrated dell remote access controller 8 +1 more A command injection vulnerability exists in local RACADM. A malicious authenticated user could... 8.0 High
- dfinity candid Infinite decoding loop through specially crafted payload 7.5 High
- blackberry qnx software development platform (sdp), qnx software development platform +1 more Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP) 7.1 High
- wago 750-331, 750-331 firmware, 750-332 +102 more +104 more WAGO: DoS in multiple products in multiple versions using Codesys 4.9 Medium
- wago 750-331, 750-331 firmware, 750-332 +102 more +104 more WAGO: DoS in multiple versions of multiple products 4.9 Medium
- xmldom, debian linux +1 more xmldom allows multiple root nodes in a DOM 9.4 Critical
- nlnet labs routinator Invalid RPKI data could disable Route Origin Validation on RTR clients. 7.5 High