CWE-233: Improper Handling of Parameters
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.
A kind of CWE-228 Improper Handling of Syntactically Invalid Structure.
From the CWE List. © The MITRE Corporation.
Newest
- lookyloo Lookyloo: Potential sub-system DoS due to parameter missmatch in notification 6.9 Medium
- blackberry ltd qnx os for safety, qnx software development platform, blackberry ltd. qnx os for medical +2 more Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety 6.2 Medium
- veeam service provider console This vulnerability in Veeam Service Provider Console allows for remote code execution. 9.4 Critical
- arqit symmetric key agreement platform Arqit SKA-Platform Improper Handling of Parameters Vulnerability 3.8 Low
- southrivertech webdrive WebDrive 18.00.5057 Denial of Service via Secure WebDAV 6.9 Medium
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 more Improper Handling of Parameters in GitLab 8.1 High
- amd radeon™ pro v620, radeon™ pro vii, radeon™ pro w6000 series graphics products +5 more +7 more Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged... 8.7 High
- hiksemi hs-afs-s1h1 Due to insufficient input parameter validation on the interface, authenticated users of certain... 4.9 Medium
- eclipse threadx Improper Parameter Check in ThreadX Syscall Implementation 7.2 High
- eclipse threadx Incomplete validation of kernel object pointers in system calls 5.7 Medium
- fortinet fortiweb A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7... 7.7 High
- red hat build of debezium, integration change data capture +1 more Debezium: script injection via connector parameter 5.9 Medium
- eclipse glassfish Glassfish redirect to untrusted site 6.9 Medium
- devlop.systems id4portais ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response,... 6.1 Medium
- google omaha, updater +1 more Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a... 7.8 High
- totolink x2000r firmware Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a... 4.8 Medium
- totolink ex200 firmware TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)... 8.8 High
- cisco ios xe software, ios xe +1 more A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software... 6.0 Medium
- epoint epointwebbuilder An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to... 9.8 Critical
- fedoraproject fedora, moodle +1 more Msa-24-0002: forum search accepted random parameters in its url 5.3 Medium
- joynext mib3 infotainment unit, skoda-auto superb 3 firmware +1 more Head Unit Denial-of-Service via Apple CarPlay service 5.3 Medium
- resque Resque vulnerable to reflected cross site scripting through pathname 6.3 Medium
- resque Resque vulnerable to reflected XSS in resque-web failed and queues lists 6.3 Medium
- resque Resque vulnerable to reflected XSS in Queue Endpoint 6.3 Medium
- huawei emui, harmonyos +1 more The SystemUI module has a vulnerability of repeated app restart due to improper parameters.... 7.5 High
- yordam library automation system IDOR in Yordam Library Automation System 6.5 Medium
- yordam library automation system IDOR in Yordam Library Automation System 6.5 Medium
- cisco iox, 807 industrial integrated services router firmware, 809 industrial integrated services router firmware +7 more +9 more Cisco IOx Application Hosting Environment Command Injection Vulnerability 7.2 High
- pistar pi-star digital voice dashboard Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter. 9.8 Critical
- redhat ansible, ansible collection +1 more Ansible leaks password to logs 7.5 High
- siemens sinema remote connect server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The... 5.3 Medium
- mobisoft - mobiplus project - mobiplus, mobisoft eharmony +1 more MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters 6.6 Medium
- zephyrproject zephyr Zephyr Bluetooth unchecked packet data results in denial of service 4.3 Medium
- python pillow, fedoraproject fedora +1 more Pillow denial of service 5.5 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks. 8.8 High
- cisco nx-os system software in aci mode, nx-os +1 more Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability 8.6 High