CWE-229: Improper Handling of Values
The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.
A kind of CWE-228 Improper Handling of Syntactically Invalid Structure.
From the CWE List. © The MITRE Corporation.
Newest
- zscaler client connector Local denial-of-service 8.4 High
- zscaler client connector Local and kernel denial-of-service 8.8 High
-
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 more Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and... 4.5 Medium - microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability 9.1 Critical
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... 7.5 High
- no-chicken echo-mate Math Issue in No-Chicken/Echo-Mate 7.3 High
-
microcodeMageia,intel-microcodeDebian,intel-ucodeAlpaquita +2 more +4 more Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an... 1.8 Low - silabs.com silicon labs zigbee stack Zigbee Router Denial of Service 9.2 Critical
- cisco firepower threat defense software Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability 5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 more A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD)... 5.8 Medium
- juniper junos os evolved Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols 8.7 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more JSON Injection in mintplex-labs/anything-llm 5.3 Medium
- oneflow Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of... 7.5 High
- dronecode px4 drone autopilot PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the... 5.6 Medium
- eprosima fast dds An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause... 5.5 Medium
- dronecode px4 drone autopilot An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for... 6.6 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 more Kernel: nf_tables: pointer math issue in nft_byteorder_eval() 6.6 Medium
- usememos memos, usememos/memos +1 more Improper Handling of Values in usememos/memos 9.8 Critical
- openbmc project openbmc Unauthenticated out of bounds stack write in bmcweb 8.2 High
- openbmc project openbmc Unauthenticated out of bounds heap write in bmcweb 8.2 High
- dell emc powerscale onefs, powerscale onefs +1 more Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An... 7.5 High
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values... 7.5 High