CWE-1287 · 140 kayıt
Improper Validation of Specified Type of Input
Bu sınıftaki CVE’ler
140 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
97Hemen | CVE-2024-4879Silahlaştırılmış | Jelly Template Injection Vulnerability in ServiceNow UI Macrosservicenow · servicenow · CWE-1287 | Kritik9,3 | KEV | %99,9 | 10 Tem 2024 |
43Planlayın | CVE-2024-6298Kavram kanıtı | remote code executionabb · aspect-ent-12 firmware · CWE-1287 | Kritik9,4 | — | %19,0 | 5 Tem 2024 |
40Planlayın | CVE-2021-32024İstismar yok | A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentiablackberry · qnx software development platform · CWE-1287 | Kritik9,8 | — | %1,7 | 13 Ara 2021 |
39İzleyin | CVE-2026-44935İstismar yok | Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployersuse · rancher fleet · CWE-1287 | Kritik9,9 | — | %0,4 | 2 Tem 2026 |
38İzleyin | CVE-2024-51550Kavram kanıtı | Data Validation / Sanitizationabb · aspect-ent-12 firmware · CWE-1287 | Kritik9,3 | — | %1,8 | 5 Ara 2024 |
37İzleyin | CVE-2024-51551İstismar yok | Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.abb · aspect-ent-2 firmware · CWE-1287 | Kritik9,3 | — | %0,4 | 5 Ara 2024 |
36İzleyin | CVE-2024-5594İstismar yok | OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected aropenvpn · openvpn · CWE-1287 | Kritik9,1 | — | %0,8 | 6 Oca 2025 |
36İzleyin | CVE-2025-12977İstismar yok | Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs.treasuredata · fluent bit · CWE-1287 | Kritik9,1 | — | %0,7 | 24 Kas 2025 |
36İzleyin | CVE-2024-35213İstismar yok | Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)blackberry · qnx software development platform · CWE-1287 | Kritik9,0 | — | %0,5 | 11 Haz 2024 |
35İzleyin | CVE-2026-2004İstismar yok | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codepostgresql · postgresql · CWE-1287 | Yüksek8,8 | — | %1,3 | 12 Şub 2026 |
35İzleyin | CVE-2026-26115İstismar yok | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2016 · CWE-1287 | Yüksek8,8 | — | %0,9 | 10 Mar 2026 |
35İzleyin | CVE-2026-96044İstismar yok | Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-1287 | Yüksek8,8 | — | %0,7 | 13 Eki 2026 |
35İzleyin | CVE-2023-47726İstismar yok | IBM QRadar Suite improper input validationibm · cloud pak for security · CWE-1287 | Yüksek8,8 | — | %0,3 | 18 Haz 2024 |
35İzleyin | CVE-2023-29126İstismar yok | Insecure loose comparison in Enel X JuiceBoxenelx · waybox pro firmware · CWE-1287 | Yüksek8,8 | — | %0,2 | 5 Kas 2024 |
34İzleyin | CVE-2024-51546Kavram kanıtı | Credentails Disclosureabb · aspect-ent-12 firmware · CWE-1287 | Yüksek8,7 | — | %1,4 | 5 Ara 2024 |
34İzleyin | CVE-2024-9404İstismar yok | Denial-of-Service Vulnerabilitymoxa · vport 07-3 series · CWE-1287 | Yüksek8,7 | — | %0,7 | 4 Ara 2024 |
34İzleyin | CVE-2024-47504İstismar yok | Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crashjuniper · junos · CWE-1287 | Yüksek8,7 | — | %0,6 | 11 Eki 2024 |
34İzleyin | CVE-2024-30395İstismar yok | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crashjuniper · junos · CWE-1287 | Yüksek8,7 | — | %0,5 | 12 Nis 2024 |
34İzleyin | CVE-2024-20494İstismar yok | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defensecisco · adaptive security appliance software · CWE-1287 | Yüksek8,6 | — | %0,5 | 23 Eki 2024 |
34İzleyin | CVE-2026-18830Kavram kanıtı | Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APIaws · amazon bedrock agentcore harness · CWE-1287 | Yüksek8,6 | — | %0,5 | 4 Ağu 2026 |
34İzleyin | CVE-2025-20251İstismar yok | Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletioncisco · cisco adaptive security appliance (asa) software · CWE-1287 | Yüksek8,5 | — | %0,4 | 14 Ağu 2025 |
34İzleyin | CVE-2025-9041İstismar yok | Rockwell Automation FLEX 5000 I/O - Module Faultrockwell automation · flex 5000 i/o · CWE-1287 | Yüksek8,7 | — | %0,3 | 14 Ağu 2025 |
34İzleyin | CVE-2025-9042İstismar yok | Rockwell Automation FLEX 5000 I/O - Module Faultrockwell automation · flex 5000 i/o · CWE-1287 | Yüksek8,7 | — | %0,3 | 14 Ağu 2025 |
34İzleyin | CVE-2026-2454İstismar yok | DoS in Calls plugin via malformed msgpack in websocket request.mattermost · mattermost server · CWE-1287 | Yüksek8,6 | — | %0,2 | 16 Mar 2026 |
33İzleyin | CVE-2026-40851İstismar yok | Command injection via USBmb connect line · mbnet/mbnet.rokey · CWE-1287 | Yüksek8,4 | — | %0,1 | 27 May 2026 |
- CVE-2024-487997Hemen
Jelly Template Injection Vulnerability in ServiceNow UI Macros
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %99servicenow · servicenow10 Tem 2024
- CVE-2024-629843Planlayın
remote code execution
KritikCVSS 9,4Kavram kanıtıEPSS %19abb · aspect-ent-12 firmware5 Tem 2024
- CVE-2021-3202440Planlayın
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentia
KritikCVSS 9,8İstismar yokEPSS %1blackberry · qnx software development platform13 Ara 2021
- CVE-2026-4493539İzleyin
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
KritikCVSS 9,9İstismar yokEPSS %0suse · rancher fleet2 Tem 2026
- CVE-2024-5155038İzleyin
Data Validation / Sanitization
KritikCVSS 9,3Kavram kanıtıEPSS %1abb · aspect-ent-12 firmware5 Ara 2024
- CVE-2024-5155137İzleyin
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
KritikCVSS 9,3İstismar yokEPSS %0abb · aspect-ent-2 firmware5 Ara 2024
- CVE-2024-559436İzleyin
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected ar
KritikCVSS 9,1İstismar yokEPSS %0openvpn · openvpn6 Oca 2025
- CVE-2025-1297736İzleyin
Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs.
KritikCVSS 9,1İstismar yokEPSS %0treasuredata · fluent bit24 Kas 2025
- CVE-2024-3521336İzleyin
Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)
KritikCVSS 9,0İstismar yokEPSS %0blackberry · qnx software development platform11 Haz 2024
- CVE-2026-200435İzleyin
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
YüksekCVSS 8,8İstismar yokEPSS %1postgresql · postgresql12 Şub 2026
- CVE-2026-2611535İzleyin
SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · sql server 201610 Mar 2026
- CVE-2026-9604435İzleyin
Microsoft Office SharePoint Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · sharepoint server13 Eki 2026
- CVE-2023-4772635İzleyin
IBM QRadar Suite improper input validation
YüksekCVSS 8,8İstismar yokEPSS %0ibm · cloud pak for security18 Haz 2024
- CVE-2023-2912635İzleyin
Insecure loose comparison in Enel X JuiceBox
YüksekCVSS 8,8İstismar yokEPSS %0enelx · waybox pro firmware5 Kas 2024
- CVE-2024-5154634İzleyin
Credentails Disclosure
YüksekCVSS 8,7Kavram kanıtıEPSS %1abb · aspect-ent-12 firmware5 Ara 2024
- CVE-2024-940434İzleyin
Denial-of-Service Vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0moxa · vport 07-3 series4 Ara 2024
- CVE-2024-4750434İzleyin
Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash
YüksekCVSS 8,7İstismar yokEPSS %0juniper · junos11 Eki 2024
- CVE-2024-3039534İzleyin
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
YüksekCVSS 8,7İstismar yokEPSS %0juniper · junos12 Nis 2024
- CVE-2024-2049434İzleyin
A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense
YüksekCVSS 8,6İstismar yokEPSS %0cisco · adaptive security appliance software23 Eki 2024
- CVE-2026-1883034İzleyin
Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
YüksekCVSS 8,6Kavram kanıtıEPSS %0aws · amazon bedrock agentcore harness4 Ağu 2026
- CVE-2025-2025134İzleyin
Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion
YüksekCVSS 8,5İstismar yokEPSS %0cisco · cisco adaptive security appliance (asa) software14 Ağu 2025
- CVE-2025-904134İzleyin
Rockwell Automation FLEX 5000 I/O - Module Fault
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · flex 5000 i/o14 Ağu 2025
- CVE-2025-904234İzleyin
Rockwell Automation FLEX 5000 I/O - Module Fault
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · flex 5000 i/o14 Ağu 2025
- CVE-2026-245434İzleyin
DoS in Calls plugin via malformed msgpack in websocket request.
YüksekCVSS 8,6İstismar yokEPSS %0mattermost · mattermost server16 Mar 2026
- CVE-2026-4085133İzleyin
Command injection via USB
YüksekCVSS 8,4İstismar yokEPSS %0mb connect line · mbnet/mbnet.rokey27 May 2026