Skip to content
Noroxi

CWE-228 · 24 records

Improper Handling of Syntactically Invalid Structure

CVEs in this class

24 records

  • CVE-2021-38443
    40Plan

    Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure

    CriticalCVSS 9.8No exploitEPSS 2%

    eclipse · cycloneddsMay 5, 2022

  • CVE-2020-27847
    40Plan

    A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation.

    CriticalCVSS 9.8No exploitEPSS 1%

    linuxfoundation · dexMay 28, 2021

  • CVE-2026-87986
    40Plan

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's

    CriticalCVSS 10.0No exploitEPSS 0%

    mistralai · mistral-vibeSep 11, 2026

  • CVE-2018-5381
    39Monitor

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp

    HighCVSS 7.5No exploitEPSS 30%

    quagga · quaggaFeb 19, 2018

  • CVE-2024-55594
    39Monitor

    An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10

    CriticalCVSS 9.8No exploitEPSS 0%

    fortinet · fortiwebMar 14, 2025

  • CVE-2023-42784
    39Monitor

    An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 a

    CriticalCVSS 9.8No exploitEPSS 0%

    fortinet · fortiwebMar 11, 2025

  • GHSA-hrhf-2vcr-ghch
    32Monitor

    CometBFT's invalid BitArray handling can lead to network halt

    HighCVSS 8.0No exploit

    Go · github.com/cometbft/cometbftOct 14, 2025

  • CVE-2026-34232
    30Monitor

    Firebird: DoS via `op_response` packet from client

    HighCVSS 7.5No exploitEPSS 0%

    firebirdsql · firebirdApr 17, 2026

  • CVE-2025-22865
    30Monitor

    ParsePKCS1PrivateKey panic with partial keys in crypto/x509

    HighCVSS 7.5No exploitEPSS 0%

    go standard library · crypto/x509Jan 27, 2025

  • CVE-2024-21612
    30Monitor

    Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE

    HighCVSS 7.5No exploitEPSS 0%

    juniper · junos os evolvedJan 11, 2024

  • CVE-2025-0343
    30Monitor

    Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions.

    HighCVSS 7.5No exploitEPSS 0%

    swift project · swift asn1Jan 14, 2025

  • CVE-2026-20125
    30Monitor

    A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote a

    HighCVSS 7.7No exploitEPSS 0%

    cisco · iosMar 25, 2026

  • CVE-2024-6382
    30Monitor

    Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

    HighCVSS 7.5No exploitEPSS 0%

    mongodb · rust driverJul 2, 2024

  • CVE-2026-42100
    28Monitor

    DoS in Sparx Pro Cloud Server

    HighCVSS 7.1No exploitEPSS 0%

    sparxsystems · pro cloud serverMay 19, 2026

  • CVE-2026-25657
    28Monitor

    Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    ericsson · packet core gatewayJun 5, 2026

  • CVE-2026-50103
    28Monitor

    Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850

    HighCVSS 7.1No exploitEPSS 0%

    mz automation · libiec61850Jul 23, 2026

  • CVE-2025-59174
    28Monitor

    Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially c

    HighCVSS 7.1No exploitEPSS 0%

    ericsson · packet core controllerJun 5, 2026

  • CVE-2024-22809
    26Monitor

    Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and

    MediumCVSS 6.5No exploitEPSS 0%

    tormach · pathpilot controllerApr 22, 2024

  • CVE-2026-107299
    23Monitor

    msgpack5: Reserved byte can cause unbounded stream buffering

    MediumCVSS 5.9No exploitEPSS 0%

    mcollina · msgpack5Oct 8, 2026

  • CVE-2021-36199
    21Monitor

    Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop.

    MediumCVSS 5.3No exploitEPSS 1%

    johnsoncontrols · videoedgeJan 14, 2022

  • CVE-2024-53828
    21Monitor

    Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    ericsson · packet core controllerApr 1, 2026

  • CVE-2024-22815
    21Monitor

    An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Servi

    MediumCVSS 5.3No exploitEPSS 0%

    tormach · pathpilot controllerApr 22, 2024

  • CVE-2025-2529
    14Monitor

    IBM Terracotta denial of service

    LowCVSS 3.7No exploitEPSS 0%

    ibm · terracottaOct 15, 2025

  • CVE-2025-47736
    11Monitor

    dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

    LowCVSS 2.9No exploitEPSS 0%

    gwenn · libsql-sqlite3-parserMay 9, 2025

All vulnerability classes