Skip to content
Noroxi

CWE-1288 · 34 records

Improper Validation of Consistency within Input

CVEs in this class

34 records

  • CVE-2024-34593
    35Monitor

    Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to ex

    HighCVSS 8.8No exploitEPSS 0%

    samsung · androidJul 2, 2024

  • CVE-2024-34619
    35Monitor

    Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privile

    HighCVSS 8.8No exploitEPSS 0%

    samsung · androidAug 6, 2024

  • CVE-2026-18794
    35Monitor

    OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

    HighCVSS 8.8No exploitEPSS 0%

    calcprogrammer1 · openrgbAug 26, 2026

  • CVE-2024-39515
    34Monitor

    Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash

    HighCVSS 8.7No exploitEPSS 0%

    juniper · junosOct 9, 2024

  • CVE-2026-101951
    34Monitor

    Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-56744
    34Monitor

    `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redir

    HighCVSS 8.7No exploitEPSS 0%

    bsv-blockchain · @bsv/wallet-toolboxSep 24, 2026

  • CVE-2024-25951
    32Monitor

    A command injection vulnerability exists in local RACADM.

    HighCVSS 8.0No exploitEPSS 0%

    dell · idrac8Mar 9, 2024

  • CVE-2026-94200
    32Monitor

    TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

    HighCVSS 8.2No exploitEPSS 0%

    erlang · otpOct 14, 2026

  • CVE-2026-42982
    31Monitor

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    microsoft · windows 10 1607Jul 14, 2026

  • CVE-2021-41531
    30Monitor

    Invalid RPKI data could disable Route Origin Validation on RTR clients.

    HighCVSS 7.5No exploitEPSS 0%

    nlnetlabs · routinatorSep 21, 2021

  • CVE-2026-69793
    30Monitor

    Windows TCP/IP Security Feature Bypass Vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    microsoft · windows 10 1607Sep 8, 2026

  • CVE-2022-50976
    30Monitor

    Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB

    HighCVSS 7.7No exploitEPSS 0%

    innomic · vibroline configurator 5.0Feb 2, 2026

  • CVE-2024-31136
    29Monitor

    In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

    HighCVSS 7.4No exploitEPSS 0%

    jetbrains · teamcityMar 28, 2024

  • CVE-2026-102047
    28Monitor

    Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2023-32701
    28Monitor

    Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

    HighCVSS 7.1No exploitEPSS 0%

    blackberry · qnx software development platformNov 14, 2023

  • CVE-2024-12093
    27Monitor

    Improper Validation of Consistency within Input in GitLab

    MediumCVSS 6.8No exploitEPSS 0%

    gitlab · gitlabMay 22, 2025

  • CVE-2024-34587
    27Monitor

    Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote att

    MediumCVSS 6.8No exploitEPSS 0%

    samsung · androidJul 2, 2024

  • CVE-2024-8305
    26Monitor

    MongoDB Server secondaries may crash due to forced index constraints

    MediumCVSS 6.5No exploitEPSS 0%

    mongodb · mongodbOct 21, 2024

  • CVE-2024-34589
    26Monitor

    Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporar

    MediumCVSS 6.5No exploitEPSS 0%

    samsung · androidJul 2, 2024

  • CVE-2024-34588
    26Monitor

    Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporar

    MediumCVSS 6.5No exploitEPSS 0%

    samsung · androidJul 2, 2024

  • CVE-2024-5953
    22Monitor

    389-ds-base: malformed userpassword hash may cause denial of service

    MediumCVSS 5.7No exploitEPSS 0%

    red hat · red hat directory server 11.5 e4s for rhel 8Jun 18, 2024

  • CVE-2026-15943
    22Monitor

    Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

    MediumCVSS 5.5No exploitEPSS 0%

    redhat · build of keycloakJul 17, 2026

  • CVE-2025-2885
    22Monitor

    Root metadata version not validated in tough

    MediumCVSS 5.7No exploitEPSS 0%

    amazon · toughMar 27, 2025

  • CVE-2026-73219
    21Monitor

    CVAT: Denial of service with regards to automatic annotation

    MediumCVSS 5.3No exploitEPSS 0%

    cvat-ai · cvatAug 11, 2026

  • CVE-2025-10929
    21Monitor

    Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

    MediumCVSS 5.3No exploitEPSS 0%

    reverse proxy header project · reverse proxy headerOct 30, 2025

All vulnerability classes