CWE-130 · 102 kayıt
Improper Handling of Length Parameter Inconsistency
Bu sınıftaki CVE’ler
102 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
89Hemen | CVE-2025-14847Silahlaştırılmış | Zlib compressed protocol header length confusion may allow memory readmongodb · mongodb · CWE-130 | Yüksek8,7 | KEV | %83,2 | 19 Ara 2025 |
41Planlayın | CVE-2021-20588İstismar yok | Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configumitsubishielectric · c controller module setting and monitoring tool · CWE-130 | Kritik9,8 | — | %6,9 | 19 Şub 2021 |
40Planlayın | CVE-2021-38445İstismar yok | OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistencyobjectcomputing · opendds · CWE-130 | Kritik9,8 | — | %2,7 | 5 May 2022 |
39İzleyin | CVE-2024-39614Kavram kanıtı | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.djangoproject · django · CWE-130 | Yüksek7,5 | — | %28,6 | 10 Tem 2024 |
39İzleyin | CVE-2022-2714İstismar yok | Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosisrosariosis · rosariosis · CWE-130 | Kritik9,8 | — | %0,9 | 6 Eyl 2022 |
38İzleyin | CVE-2019-3862İstismar yok | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message andlibssh2 · libssh2 · CWE-130 | Kritik9,1 | — | %7,9 | 21 Mar 2019 |
37İzleyin | CVE-2026-67292İstismar yok | FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosurefreerdp · freerdp · CWE-130 | Kritik9,3 | — | %0,5 | 1 Ağu 2026 |
36İzleyin | CVE-2026-9054İstismar yok | Invalid IP packets cause a kernel panic9front · 9front · CWE-130 | Kritik9,2 | — | %0,5 | 22 May 2026 |
36İzleyin | CVE-2026-54466İstismar yok | websocket-driver: Message corruption via abuse of protocol length headersfaye · websocket-driver · CWE-130 | Kritik9,2 | — | %0,4 | 17 Tem 2026 |
36İzleyin | CVE-2023-5778İstismar yok | Missing Length Checkabb · freelance controller dcp · CWE-130 | Kritik9,2 | — | %0,3 | 18 Eyl 2026 |
35İzleyin | CVE-2022-1543İstismar yok | Improper handling of Length parameter in erudika/scoolderudika · scoold · CWE-130 | Yüksek8,8 | — | %1,1 | 29 Nis 2022 |
35İzleyin | CVE-2022-20690İstismar yok | Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allowcisco · ata 190 firmware · CWE-130 | Yüksek8,8 | — | %0,7 | 12 Ara 2022 |
35İzleyin | CVE-2022-20689İstismar yok | Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allowcisco · ata 190 firmware · CWE-130 | Yüksek8,8 | — | %0,7 | 12 Ara 2022 |
35İzleyin | CVE-2026-58096İstismar yok | ppp(8): missing length validation in LcpDecodeConfig()freebsd · freebsd · CWE-130 | Yüksek8,8 | — | %0,6 | 26 Ağu 2026 |
35İzleyin | CVE-2026-73455İstismar yok | Security Advisory 0173arista networks · eos · CWE-130 | Yüksek8,9 | — | %0,5 | 16 Eyl 2026 |
35İzleyin | CVE-2020-10065İstismar yok | Missing Size Checks in Bluetooth HCI over SPIzephyrproject · zephyr · CWE-130 | Yüksek8,8 | — | %0,5 | 25 May 2021 |
35İzleyin | CVE-2026-5706İstismar yok | Buffer overflow in Bluetooth Mesh SDK when handling extended advertisementssilicon labs · bt mesh sdk · CWE-130 | Yüksek8,9 | — | %0,4 | 27 Ağu 2026 |
34İzleyin | CVE-2021-36090İstismar yok | Apache Commons Compress 1.0 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-130 | Yüksek7,5 | — | %12,9 | 13 Tem 2021 |
34İzleyin | CVE-2021-35516İstismar yok | Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-130 | Yüksek7,5 | — | %12,4 | 13 Tem 2021 |
34İzleyin | CVE-2022-20870İstismar yok | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerabilitycisco · ios xe · CWE-130 | Yüksek8,6 | — | %0,9 | 10 Eki 2022 |
34İzleyin | CVE-2026-5367İstismar yok | Ovn: ovn: information disclosure via crafted dhcpv6 packetsred hat · fast datapath for red hat enterprise linux 10 · CWE-130 | Yüksek8,6 | — | %0,9 | 24 Nis 2026 |
34İzleyin | CVE-2026-3868İstismar yok | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router.moxa · edr-8010 series · CWE-130 | Yüksek8,7 | — | %0,5 | 27 Nis 2026 |
34İzleyin | CVE-2026-77619İstismar yok | Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.vectordotdev · vector · CWE-130 | Yüksek8,7 | — | %0,5 | 22 Eyl 2026 |
34İzleyin | CVE-2025-30659İstismar yok | Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed trafficjuniper · junos · CWE-130 | Yüksek8,7 | — | %0,4 | 9 Nis 2025 |
33İzleyin | CVE-2021-35517İstismar yok | Apache Commons Compress 1.1 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-130 | Yüksek7,5 | — | %10,6 | 13 Tem 2021 |
- CVE-2025-1484789Hemen
Zlib compressed protocol header length confusion may allow memory read
YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %83mongodb · mongodb19 Ara 2025
- CVE-2021-2058841Planlayın
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configu
KritikCVSS 9,8İstismar yokEPSS %7mitsubishielectric · c controller module setting and monitoring tool19 Şub 2021
- CVE-2021-3844540Planlayın
OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency
KritikCVSS 9,8İstismar yokEPSS %3objectcomputing · opendds5 May 2022
- CVE-2024-3961439İzleyin
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
YüksekCVSS 7,5Kavram kanıtıEPSS %29djangoproject · django10 Tem 2024
- CVE-2022-271439İzleyin
Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis
KritikCVSS 9,8İstismar yokEPSS %1rosariosis · rosariosis6 Eyl 2022
- CVE-2019-386238İzleyin
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and
KritikCVSS 9,1İstismar yokEPSS %8libssh2 · libssh221 Mar 2019
- CVE-2026-6729237İzleyin
FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure
KritikCVSS 9,3İstismar yokEPSS %0freerdp · freerdp1 Ağu 2026
- CVE-2026-905436İzleyin
Invalid IP packets cause a kernel panic
KritikCVSS 9,2İstismar yokEPSS %19front · 9front22 May 2026
- CVE-2026-5446636İzleyin
websocket-driver: Message corruption via abuse of protocol length headers
KritikCVSS 9,2İstismar yokEPSS %0faye · websocket-driver17 Tem 2026
- CVE-2023-577836İzleyin
Missing Length Check
KritikCVSS 9,2İstismar yokEPSS %0abb · freelance controller dcp18 Eyl 2026
- CVE-2022-154335İzleyin
Improper handling of Length parameter in erudika/scoold
YüksekCVSS 8,8İstismar yokEPSS %1erudika · scoold29 Nis 2022
- CVE-2022-2069035İzleyin
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow
YüksekCVSS 8,8İstismar yokEPSS %1cisco · ata 190 firmware12 Ara 2022
- CVE-2022-2068935İzleyin
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow
YüksekCVSS 8,8İstismar yokEPSS %1cisco · ata 190 firmware12 Ara 2022
- CVE-2026-5809635İzleyin
ppp(8): missing length validation in LcpDecodeConfig()
YüksekCVSS 8,8İstismar yokEPSS %1freebsd · freebsd26 Ağu 2026
- CVE-2026-7345535İzleyin
Security Advisory 0173
YüksekCVSS 8,9İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2020-1006535İzleyin
Missing Size Checks in Bluetooth HCI over SPI
YüksekCVSS 8,8İstismar yokEPSS %0zephyrproject · zephyr25 May 2021
- CVE-2026-570635İzleyin
Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements
YüksekCVSS 8,9İstismar yokEPSS %0silicon labs · bt mesh sdk27 Ağu 2026
- CVE-2021-3609034İzleyin
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
YüksekCVSS 7,5İstismar yokEPSS %13apache · commons compress13 Tem 2021
- CVE-2021-3551634İzleyin
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
YüksekCVSS 7,5İstismar yokEPSS %12apache · commons compress13 Tem 2021
- CVE-2022-2087034İzleyin
Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1cisco · ios xe10 Eki 2022
- CVE-2026-536734İzleyin
Ovn: ovn: information disclosure via crafted dhcpv6 packets
YüksekCVSS 8,6İstismar yokEPSS %1red hat · fast datapath for red hat enterprise linux 1024 Nis 2026
- CVE-2026-386834İzleyin
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router.
YüksekCVSS 8,7İstismar yokEPSS %1moxa · edr-8010 series27 Nis 2026
- CVE-2026-7761934İzleyin
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
YüksekCVSS 8,7İstismar yokEPSS %1vectordotdev · vector22 Eyl 2026
- CVE-2025-3065934İzleyin
Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
YüksekCVSS 8,7İstismar yokEPSS %0juniper · junos9 Nis 2025
- CVE-2021-3551733İzleyin
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
YüksekCVSS 7,5İstismar yokEPSS %11apache · commons compress13 Tem 2021