İçeriğe atla
Noroxi

CWE-1284 · 305 kayıt

Improper Validation of Specified Quantity in Input

Bu sınıftaki CVE’ler

305 kayıt

  • CVE-2010-3904
    66Bu hafta

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %16

    linux · linux kernel6 Ara 2010

  • CVE-2021-43267
    56Planlayın

    An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16.

    KritikCVSS 9,8Kavram kanıtıEPSS %58

    linux · linux kernel2 Kas 2021

  • CVE-2022-37134
    46Planlayın

    D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.

    KritikCVSS 9,8İstismar yokEPSS %22

    dlink · dir-816 firmware22 Ağu 2022

  • CVE-2026-49777
    41Planlayın

    WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    shapedplugin, llc · product slider pro for woocommerce5 Haz 2026

  • CVE-2008-2374
    40Planlayın

    src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string lengt

    KritikCVSS 9,8İstismar yokEPSS %4

    bluez · bluez-libs7 Tem 2008

  • CVE-2026-81779
    40Planlayın

    WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    silk themes · newspapers x31 Ağu 2026

  • CVE-2021-31556
    39İzleyin

    An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.

    KritikCVSS 9,8İstismar yokEPSS %2

    mediawiki · mediawiki12 Ağu 2021

  • CVE-2026-3381
    39İzleyin

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

    KritikCVSS 9,8İstismar yokEPSS %1

    pmqs · compress\4 Mar 2026

  • CVE-2026-25345
    39İzleyin

    WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    gallerycreator · simply gallery25 Mar 2026

  • CVE-2022-25727
    39İzleyin

    Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna

    KritikCVSS 9,8İstismar yokEPSS %0

    qualcomm · ar8031 firmware15 Kas 2022

  • CVE-2022-20385
    39İzleyin

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (i

    KritikCVSS 9,8İstismar yokEPSS %0

    google · android13 Eyl 2022

  • CVE-2025-43964
    39İzleyin

    In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

    KritikCVSS 9,8İstismar yokEPSS %0

    libraw · libraw20 Nis 2025

  • CVE-2025-55398
    39İzleyin

    An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.

    KritikCVSS 9,8İstismar yokEPSS %0

    22 Ağu 2025

  • CVE-2025-9316
    38İzleyin

    N-central unauthenticated sessionID generation

    OrtaCVSS 6,9SilahlaştırılmışEPSS %36

    n-able · n-central12 Kas 2025

  • CVE-2024-9369
    38İzleyin

    Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer proc

    KritikCVSS 9,6İstismar yokEPSS %1

    google · chrome27 Kas 2024

  • CVE-2026-87470
    38İzleyin

    Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbi

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome8 Eyl 2026

  • CVE-2022-36620
    37İzleyin

    D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.

    YüksekCVSS 7,5İstismar yokEPSS %24

    dlink · dir-816 firmware31 Ağu 2022

  • CVE-2021-31346
    37İzleyin

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions

    KritikCVSS 9,1İstismar yokEPSS %2

    siemens · capital vstar9 Kas 2021

  • CVE-2025-5349
    36İzleyin

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    YüksekCVSS 8,7Kavram kanıtıEPSS %6

    citrix · netscaler application delivery controller17 Haz 2025

  • CVE-2021-31345
    36İzleyin

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions

    KritikCVSS 9,1İstismar yokEPSS %2

    siemens · capital vstar9 Kas 2021

  • CVE-2026-57623
    36İzleyin

    WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability

    KritikCVSS 9,0İstismar yokEPSS %1

    boldgrid · w3 total cache2 Tem 2026

  • CVE-2022-25769
    36İzleyin

    Improper regex in htaccess file

    KritikCVSS 9,1İstismar yokEPSS %1

    acquia · mautic18 Eyl 2024

  • CVE-2026-27384
    36İzleyin

    WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    boldgrid · w3 total cache5 Mar 2026

  • CVE-2025-65548
    36İzleyin

    NUT-14 allows cashu tokens to be created with a preimage hash.

    KritikCVSS 9,1İstismar yokEPSS %0

    cashu · nutshell8 Ara 2025

  • CVE-2008-1440
    35İzleyin

    Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multi

    YüksekCVSS 7,1İstismar yokEPSS %23

    microsoft · windows server 200311 Haz 2008

Tüm zafiyet sınıfları