Skip to content
Noroxi

CWE-1284 · 334 records

Improper Validation of Specified Quantity in Input

CVEs in this class

334 records

  • CVE-2010-3904
    66This week

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before

    HighCVSS 7.8KEVWeaponizedEPSS 15%

    linux · linux kernelDec 6, 2010

  • CVE-2025-9316
    60This week

    N-central unauthenticated sessionID generation

    MediumCVSS 6.9WeaponizedEPSS 37%

    n-able · n-centralNov 12, 2025

  • CVE-2021-43267
    56Plan

    An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16.

    CriticalCVSS 9.8Proof of conceptEPSS 57%

    linux · linux kernelNov 2, 2021

  • CVE-2022-37134
    46Plan

    D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.

    CriticalCVSS 9.8No exploitEPSS 21%

    dlink · dir-816 firmwareAug 22, 2022

  • CVE-2008-2374
    40Plan

    src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string lengt

    CriticalCVSS 9.8No exploitEPSS 4%

    bluez · bluez-libsJul 7, 2008

  • CVE-2026-49777
    40Plan

    WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    shapedplugin, llc · product slider pro for woocommerceJun 5, 2026

  • CVE-2026-81779
    40Plan

    WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    silk themes · newspapers xAug 31, 2026

  • CVE-2021-31556
    39Monitor

    An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.

    CriticalCVSS 9.8No exploitEPSS 1%

    mediawiki · mediawikiAug 12, 2021

  • CVE-2026-3381
    39Monitor

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

    CriticalCVSS 9.8No exploitEPSS 0%

    pmqs · compress\Mar 4, 2026

  • CVE-2026-25345
    39Monitor

    WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    gallerycreator · simply galleryMar 25, 2026

  • CVE-2022-25727
    39Monitor

    Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna

    CriticalCVSS 9.8No exploitEPSS 0%

    qualcomm · ar8031 firmwareNov 15, 2022

  • CVE-2022-20385
    39Monitor

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (i

    CriticalCVSS 9.8No exploitEPSS 0%

    google · androidSep 13, 2022

  • CVE-2025-43964
    39Monitor

    In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

    CriticalCVSS 9.8No exploitEPSS 0%

    libraw · librawApr 20, 2025

  • CVE-2025-55398
    39Monitor

    An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 22, 2025

  • CVE-2024-9369
    38Monitor

    Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer proc

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chromeNov 27, 2024

  • CVE-2026-87470
    38Monitor

    Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbi

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chromeSep 8, 2026

  • CVE-2022-36620
    37Monitor

    D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.

    HighCVSS 7.5No exploitEPSS 23%

    dlink · dir-816 firmwareAug 31, 2022

  • CVE-2021-31346
    37Monitor

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions

    CriticalCVSS 9.1No exploitEPSS 1%

    siemens · capital vstarNov 9, 2021

  • CVE-2025-5349
    36Monitor

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    HighCVSS 8.7Proof of conceptEPSS 6%

    citrix · netscaler application delivery controllerJun 17, 2025

  • CVE-2021-31345
    36Monitor

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions

    CriticalCVSS 9.1No exploitEPSS 1%

    siemens · capital vstarNov 9, 2021

  • CVE-2026-57623
    36Monitor

    WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability

    CriticalCVSS 9.0No exploitEPSS 0%

    boldgrid · w3 total cacheJul 2, 2026

  • CVE-2022-25769
    36Monitor

    Improper regex in htaccess file

    CriticalCVSS 9.1No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2025-65548
    36Monitor

    NUT-14 allows cashu tokens to be created with a preimage hash.

    CriticalCVSS 9.1No exploitEPSS 0%

    cashu · nutshellDec 8, 2025

  • CVE-2026-27384
    36Monitor

    WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

    CriticalCVSS 9.0Proof of conceptEPSS 0%

    boldgrid · w3 total cacheMar 5, 2026

  • CVE-2008-1440
    35Monitor

    Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multi

    HighCVSS 7.1No exploitEPSS 22%

    microsoft · windows server 2003Jun 11, 2008

All vulnerability classes