CWE-1286 · 87 records
Improper Validation of Syntactic Correctness of Input
CVEs in this class
87 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-110759No exploit | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parseCWE-1286 | Critical9.8 | — | 0.4% | Oct 16, 2026 |
36Monitor | CVE-2026-102084No exploit | Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Executionjuniper networks · junos os · CWE-1286 | Critical9.2 | — | 0.5% | Oct 14, 2026 |
36Monitor | CVE-2026-87080No exploit | Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycodeCWE-1286 | Critical9.1 | — | 0.3% | Sep 22, 2026 |
35Monitor | CVE-2021-31988No exploit | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and axis · axis os · CWE-1286 | High8.8 | — | 0.9% | Oct 5, 2021 |
35Monitor | CVE-2025-41719No exploit | Sauter: Improper Validation of user-controlled datasauter · modulo 6 devices modu680-as · CWE-1286 | High8.8 | — | 0.5% | Oct 22, 2025 |
35Monitor | CVE-2026-83728No exploit | Windows Hyper-V Spoofing Vulnerabilitymicrosoft · windows 10 1607 · CWE-1286 | High8.8 | — | 0.3% | Oct 13, 2026 |
34Monitor | CVE-2024-51983No exploit | Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricobrother industries, ltd · hl-l8260cdn · CWE-1286 | High7.5 | — | 11.7% | Jun 25, 2025 |
34Monitor | CVE-2024-21598No exploit | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crashjuniper · junos · CWE-1286 | High8.7 | — | 0.5% | Apr 12, 2024 |
34Monitor | CVE-2024-39542No exploit | Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crashjuniper · junos · CWE-1286 | High8.7 | — | 0.4% | Jul 11, 2024 |
34Monitor | CVE-2026-57026No exploit | Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crashjuniper · junos · CWE-1286 | High8.7 | — | 0.4% | Jul 9, 2026 |
34Monitor | CVE-2025-11573No exploit | Denial of Service issue in Amazon.IonDotnetamazon · amazon.iondotnet · CWE-1286 | High8.7 | — | 0.4% | Oct 9, 2025 |
34Monitor | CVE-2026-21917No exploit | Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crashjuniper · junos · CWE-1286 | High8.7 | — | 0.4% | Jan 15, 2026 |
34Monitor | CVE-2025-8873No exploit | Arista EOS Dataplane Denial of Service via Malformed IPsec Packetarista networks · eos · CWE-1286 | High8.7 | — | 0.3% | Jun 4, 2026 |
34Monitor | CVE-2026-33778No exploit | Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashesjuniper · junos · CWE-1286 | High8.7 | — | 0.3% | Apr 9, 2026 |
34Monitor | CVE-2026-123572No exploit | Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parserhickory-dns · hickory-dns · CWE-1286 | High8.7 | — | 0.3% | 1 day ago |
33Monitor | CVE-2024-51982No exploit | Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricobrother industries, ltd · hl-l8260cdn · CWE-1286 | High7.5 | — | 10.7% | Jun 25, 2025 |
33Monitor | CVE-2026-6442No exploit | Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interfacesnowflake · cortex code cli · CWE-1286 | High8.3 | — | 0.3% | Apr 16, 2026 |
32Monitor | CVE-2023-32649No exploit | DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0nozominetworks · cmc · CWE-1286 | High8.2 | — | 0.6% | Sep 19, 2023 |
32Monitor | CVE-2024-0218No exploit | DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1nozomi networks · guardian · CWE-1286 | High8.2 | — | 0.5% | Apr 10, 2024 |
32Monitor | CVE-2026-110675No exploit | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hvCWE-1286 | High8.1 | — | 0.4% | Oct 19, 2026 |
31Monitor | CVE-2024-26507No exploit | An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escCWE-1286 | High7.8 | — | 0.2% | Jun 10, 2024 |
30Monitor | CVE-2022-1941No exploit | Out of Memory issue in ProtocolBuffers for cpp and pythongoogle · protobuf-cpp · CWE-1286 | High7.5 | — | 1.5% | Sep 22, 2022 |
30Monitor | CVE-2024-24786No exploit | Infinite loop in JSON unmarshaling in google.golang.org/protobufgoogle.golang.org/protobuf · google.golang.org/protobuf/encoding/protojson · CWE-1286 | High7.5 | — | 1.2% | Mar 5, 2024 |
30Monitor | CVE-2021-31987No exploit | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipaxis · axis os · CWE-1286 | High7.5 | — | 0.8% | Oct 5, 2021 |
30Monitor | CVE-2024-3384No exploit | PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packetspaloaltonetworks · pan-os · CWE-1286 | High7.5 | — | 0.8% | Apr 10, 2024 |
- CVE-2026-11075939Monitor
Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse
CriticalCVSS 9.8No exploitEPSS 0%Oct 16, 2026
- CVE-2026-10208436Monitor
Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution
CriticalCVSS 9.2No exploitEPSS 0%juniper networks · junos osOct 14, 2026
- CVE-2026-8708036Monitor
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode
CriticalCVSS 9.1No exploitEPSS 0%Sep 22, 2026
- CVE-2021-3198835Monitor
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and
HighCVSS 8.8No exploitEPSS 0%axis · axis osOct 5, 2021
- CVE-2025-4171935Monitor
Sauter: Improper Validation of user-controlled data
HighCVSS 8.8No exploitEPSS 0%sauter · modulo 6 devices modu680-asOct 22, 2025
- CVE-2026-8372835Monitor
Windows Hyper-V Spoofing Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Oct 13, 2026
- CVE-2024-5198334Monitor
Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Rico
HighCVSS 7.5No exploitEPSS 11%brother industries, ltd · hl-l8260cdnJun 25, 2025
- CVE-2024-2159834Monitor
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
HighCVSS 8.7No exploitEPSS 0%juniper · junosApr 12, 2024
- CVE-2024-3954234Monitor
Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash
HighCVSS 8.7No exploitEPSS 0%juniper · junosJul 11, 2024
- CVE-2026-5702634Monitor
Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
HighCVSS 8.7No exploitEPSS 0%juniper · junosJul 9, 2026
- CVE-2025-1157334Monitor
Denial of Service issue in Amazon.IonDotnet
HighCVSS 8.7No exploitEPSS 0%amazon · amazon.iondotnetOct 9, 2025
- CVE-2026-2191734Monitor
Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash
HighCVSS 8.7No exploitEPSS 0%juniper · junosJan 15, 2026
- CVE-2025-887334Monitor
Arista EOS Dataplane Denial of Service via Malformed IPsec Packet
HighCVSS 8.7No exploitEPSS 0%arista networks · eosJun 4, 2026
- CVE-2026-3377834Monitor
Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes
HighCVSS 8.7No exploitEPSS 0%juniper · junosApr 9, 2026
- CVE-2026-12357234Monitor
Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser
HighCVSS 8.7No exploitEPSS 0%hickory-dns · hickory-dns1 day ago
- CVE-2024-5198233Monitor
Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Rico
HighCVSS 7.5No exploitEPSS 10%brother industries, ltd · hl-l8260cdnJun 25, 2025
- CVE-2026-644233Monitor
Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface
HighCVSS 8.3No exploitEPSS 0%snowflake · cortex code cliApr 16, 2026
- CVE-2023-3264932Monitor
DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
HighCVSS 8.2No exploitEPSS 0%nozominetworks · cmcSep 19, 2023
- CVE-2024-021832Monitor
DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
HighCVSS 8.2No exploitEPSS 0%nozomi networks · guardianApr 10, 2024
- CVE-2026-11067532Monitor
Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv
HighCVSS 8.1No exploitEPSS 0%Oct 19, 2026
- CVE-2024-2650731Monitor
An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to esc
HighCVSS 7.8No exploitEPSS 0%Jun 10, 2024
- CVE-2022-194130Monitor
Out of Memory issue in ProtocolBuffers for cpp and python
HighCVSS 7.5No exploitEPSS 1%google · protobuf-cppSep 22, 2022
- CVE-2024-2478630Monitor
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
HighCVSS 7.5No exploitEPSS 1%google.golang.org/protobuf · google.golang.org/protobuf/encoding/protojsonMar 5, 2024
- CVE-2021-3198730Monitor
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recip
HighCVSS 7.5No exploitEPSS 0%axis · axis osOct 5, 2021
- CVE-2024-338430Monitor
PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
HighCVSS 7.5No exploitEPSS 0%paloaltonetworks · pan-osApr 10, 2024