CWE-1284

Improper Validation of Specified Quantity in Input

Parent: CWE-20 - Improper Input Validation

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

364 vulnerabilities with CWE-1284
CVE-2023-42448 HIGH
Hydra < 0.13.0 - Improper Validation of Contestation Period in Head Validator
CVSS 8.1
CVE-2023-42447 HIGH
blurhash-rs 0.1.1 - Denial of Service via Malicious Blurhash Input
CVSS 8.6
CVE-2023-42444 HIGH
phonenumber < 0.2.5 - Denial of Service via Malicious Phone Number String
CVSS 8.6
CVE-2023-4439 MEDIUM
SourceCodester Card Holder Management System 1.0 - Info Disclosure
CVSS 4.3
CVE-2023-38744 HIGH
Omron CJ2M/CJ2H/CS/CJ Series - Denial of Service via Crafted EtherNet/IP Packet
CVSS 7.5
CVE-2023-35932 HIGH
jcvi < 1.3.5 - Configuration Injection
CVSS 7.1
CVE-2023-34188 HIGH
Mongoose < 7.10 - Denial of Service via Negative Content-Length Header
CVSS 7.5
CVE-2023-30082 HIGH
osTicket - Denial of Service via Long Password Input
CVSS 7.5
CVE-2023-25731 HIGH
Firefox < 110.0 - Privilege Escalation via Developer Tools Network Panel URL Preview
CVSS 8.8
CVE-2023-21111 MEDIUM
Android - Local Denial of Service via PhoneAccountRegistrar Input Validation
CVSS 5.5
CVE-2023-20722 MEDIUM
Android - Local Privilege Escalation via m4u Improper Input Validation
CVSS 6.7
CVE-2023-20710 MEDIUM
Android - Local Information Disclosure via Missing Bounds Check in keyinstall
CVSS 4.4
CVE-2023-20709 MEDIUM
Android - Local Information Disclosure via Missing Bounds Check in keyinstall
CVSS 4.4
CVE-2023-20708 MEDIUM
Android - Out-of-Bounds Read in Keyinstall
CVSS 6.7
CVE-2023-20707 MEDIUM
Android - Local Privilege Escalation via Missing Bounds Check in ril
CVSS 6.7
CVE-2023-20705 MEDIUM
Android - Local Information Disclosure via Missing Bounds Check in APU
CVSS 5.5
CVE-2023-20704 MEDIUM
Android - Local Information Disclosure via Missing Bounds Check in APU
CVSS 5.5
CVE-2023-27961 MEDIUM
iPadOS < 15.7.4 - Information Exfiltration via Malicious Calendar Invitation
CVSS 5.5
CVE-2023-27941 MEDIUM
iPadOS < 15.7.4 - Kernel Memory Disclosure via Input Validation Issue
CVSS 5.5
CVE-2023-30269 HIGH
cltphp <=6.0 - Improper Input Validation in Template Controller
CVSS 8.1
CVE-2023-0195 LOW
NVIDIA GPU Display Driver - Info Disclosure
CVSS 2.0
CVE-2023-0194 LOW
NVIDIA Virtual GPU < 11.12 - Denial of Service via Invalid Display Configuration
CVSS 2.0
CVE-2023-23626 MEDIUM
go-bitfield < 1.1.0 - Denial of Service via Invalid Size Parameter in NewBitfield and FromBytes
CVSS 5.9
CVE-2023-22409 MEDIUM
Juniper Junos OS Multiple Versions - Authenticated DoS via NAT Configuration CLI
CVSS 5.5
CVE-2022-4990 HIGH
Asus AI Suite 3 < v3.03.00 - Improper Validation of Specified Quantity in Input
Details
Vulnerabilities 364