CWE-1284
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
364 vulnerabilities with CWE-1284
CVE-2026-33349
MEDIUM
fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation
CVSS 5.9
CVE-2026-26940
MEDIUM
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
CVSS 6.5
CVE-2026-31971
HIGH
HTSlib CRAM decoder vulnerable to buffer overflow
CVSS 8.1
CVE-2026-31970
HIGH
HTSlib BGZF GZI Index - Heap Buffer Overflow
CVSS 8.1
CVE-2026-3085
HIGH
GStreamer - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-2229
HIGH
undici < 6.24.0 and 7.0.0-7.24.0 - Denial of Service via Invalid server_max_window_bits Parameter
CVSS 7.5
CVE-2026-1528
HIGH
undici 6.0.0-6.23.9 7.0.0-7.23.9 - Denial of Service via WebSocket Frame Length Overflow
CVSS 7.5
CVE-2026-3816
MEDIUM
OWASP DefectDojo < 2.56.0 - Denial of Service via Zip Bomb in SonarQubeParser/MSDefenderParser
CVSS 4.3
CVE-2026-29062
HIGH
jackson-core 3.0.0-3.1.0 - Denial of Service via UTF8DataInputJsonParser and ReaderBasedJsonParser
CVSS 7.5
CVE-2026-27384
CRITICAL
W3 Total Cache <=2.9.1 - Privilege Escalation
CVSS 9.0
CVE-2026-3381
CRITICAL
Compress::Raw::Zlib <=2.219 - Insecure Dependency
CVSS 9.8
CVE-2026-2597
HIGH
Crypt::SysRandom::XS <0.010 - Buffer Overflow
CVSS 7.5
CVE-2026-26934
MEDIUM
Kibana 8.18.0-8.19.11 - Authenticated Denial of Service via Input Data Manipulation
CVSS 6.5
CVE-2026-27171
LOW
zlib < 1.3.2 - Denial of Service via crc32_combine64 Function
CVSS 2.9
CVE-2026-2474
HIGH
Crypt::URandom 0.41-0.54 - Buffer Overflow
CVSS 7.5
CVE-2026-23864
HIGH
React Server Components 19.0.0-19.0.3, 19.1.0-19.1.4, 19.2.0-19.2.3 - DoS via Crafted HTTP Requests
CVSS 7.5
CVE-2026-0925
LOW
Tanium Discover 4.10-4.10.134 - Improper Input Validation
CVSS 2.7
CVE-2026-21485
HIGH
iccdev < 2.3.1.2 - Out-of-bounds Read
CVSS 8.8
CVE-2025-15645
MEDIUM
Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service
CVSS 4.6
CVE-2025-66660
LOW
Amd Radeon™ RX 6000 Series Graphics Products - Improper Validation of Specified Quantity in Input
CVE-2025-14869
HIGH
Improper Validation of Specified Quantity in Input in GitLab
CVSS 7.5
CVE-2025-70071
MEDIUM
Assimp 6.0.2 - Denial of Service via FBX Parser Vector Data Array
CVSS 5.9
CVE-2025-70069
HIGH
Assimp 6.0.2 - Denial of Service via FBXConverter.cpp ConvertMeshMultiMaterial Method
CVSS 7.5
CVE-2025-14688
MEDIUM
IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations
CVSS 5.3
CVE-2025-3756
MEDIUM
Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850
CVSS 6.5
Details
Vulnerabilities
364