The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
134 vulnerabilities with CWE-1287
CVE-2025-21083
MEDIUM
Mattermost Mobile Apps <=2.22.0 - Code Injection
CVSS 6.5
CVE-2025-20088
MEDIUM
Mattermost <10.2.0-10.2.0, <9.11.5-9.11.5, <10.0.3-10.0.3, <10.1.3-...
CVSS 6.5
CVE-2025-20086
MEDIUM
Mattermost <10.2.0-10.1.3 - Code Injection
CVSS 6.5
CVE-2025-20036
MEDIUM
Mattermost Mobile Apps <=2.22.0 - Code Injection
CVSS 6.5
CVE-2025-20033
MEDIUM
Mattermost 9.11.0-9.11.5, 10.0.0-10.0.3, 10.1.0-10.1.3, 10.2.0 DoS via Custom Post Type Validation Bypass
CVSS 4.3
CVE-2024-6858
MEDIUM
Arista EOS 802.1X Multi-Auth - Authentication Bypass
CVSS 6.5
CVE-2024-2105
MEDIUM
JBL Flip 5/6, Pulse 4/5, Boombox 2/3, Xtreme 3 - DoS via BLE
CVSS 6.5
CVE-2024-48851
HIGH
ABB FLXEON <= 9.3.5 - Remote Code Execution via Improper Input Validation
CVSS 7.2
CVE-2024-40682
MEDIUM
IBM SmartCloud Analytics - Log Analysis <1.3.8.2 - DoS
CVSS 6.2
CVE-2024-42189
MEDIUM
HCL BigFix Platform 10.0.0-10.0.12 - Denial of Service via API Parameter
CVSS 6.5
CVE-2024-47261
MEDIUM
AXIS OS 10.12.0-12.3.55, 10.12.0-10.12.275, 11.0.0-11.11.140 - Unauthenticated Arbitrary File Upload
CVSS 4.3
CVE-2024-47262
MEDIUM
AXIS OS 6.50.0-12.3.3 - DoS via VAPIX API param.cgi Race Condition
CVSS 5.3
CVE-2024-56908
MEDIUM
Perfex CRM < 3.2.1 - Authenticated Arbitrary File Upload via upload_sales_file rel_id Parameter
CVSS 6.8
CVE-2024-12756
HIGH
Avaya Spaces - HTML Injection
CVSS 7.3
CVE-2024-8125
MEDIUM
OpenText Content Management <24.4 - Parameter Injection
CVE-2024-48858
HIGH
QNX Software Development Platform 7.0-8.0 - Unauthenticated Denial of Service via PCX Image Codec
CVSS 7.5
CVE-2024-5594
CRITICAL
OpenVPN 2.6.0-2.6.10 - Arbitrary Data Injection via PUSH_REPLY Message
CVSS 9.1
CVE-2024-8058
HIGH
Lenovo FileZ Client < 9.8.6.0 - Arbitrary File Read via URL Preloading
CVSS 7.6
CVE-2024-54083
MEDIUM
Mattermost 9.5.0-9.5.12 10.0.0-10.0.2 10.1.0-10.1.2 - Denial of Service via Crafted Post
CVSS 6.5
CVE-2024-51551
CRITICAL
ABB ASPECT/NEXUS/MATRIX Firmware < 3.07.02 - Unauthenticated Default Credential Access
CVSS 10.0
CVE-2024-51550
CRITICAL
ABB ASPECT Enterprise, NEXUS Series, and MATRIX Series <3.08.02 <3 - Data Validation
CVSS 10.0
CVE-2024-51546
HIGH
ABB ASPECT Enterprise, NEXUS Series, MATRIX Series <3.08.02 - Credentials Disclosure
CVSS 7.5
CVE-2024-9404
HIGH
Moxa VPort 07-3 Series < 1.0 and EDS Series < 3.12 - Denial of Service via moxa_cmd Service
CVSS 7.5
CVE-2024-8403
HIGH
Mitsubishi Electric MELSEC iQ-F Series - DoS
CVSS 7.5
CVE-2024-43426
HIGH
moodle - Arbitrary File Read via TeX Notation Filter
CVSS 7.5
Details
Vulnerabilities
134