# CWE-1284.

Every Advisory and CVE whose sources give the weakness CWE-1284, newest first.

## Records, newest first (an older page)

- [WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service](https://agentprime.io/advisories/CVE-2021-47827.md)
  `CVE-2021-47827` · CVE record: WebSSH WebSSH for iOS · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-1284
- [iDailyDiary 4.30 - Denial of Service (PoC)](https://agentprime.io/advisories/CVE-2021-47824.md)
  `CVE-2021-47824` · CVE record: Splinterware iDailyDiary · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-1284
- [RarmaRadio 2.72.8 - Denial of Service](https://agentprime.io/advisories/CVE-2021-47821.md)
  `CVE-2021-47821` · CVE record: Raimersoft RarmaRadio · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-1284
- [DupTerminator 1.4.5639.37199 - Denial of Service](https://agentprime.io/advisories/CVE-2021-47818.md)
  `CVE-2021-47818` · CVE record: dupterminator DupTerminator · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-1284
- [Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)](https://agentprime.io/advisories/CVE-2023-54337.md)
  `CVE-2023-54337` · CVE record: Sysax Sysax Multi Server · CVSS 5.1 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-1284
- [iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()](https://agentprime.io/advisories/CVE-2026-21485.md)
  `CVE-2026-21485` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, Denial of service, CWE-20, CWE-1284
- [Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read](https://agentprime.io/advisories/CVE-2025-10933.md)
  `CVE-2025-10933` · CVE record: silabs.com Z-Wave Protocol Controller · CVSS 5.3 Medium · Not analysed yet · Published 5 Jan 2026 · Tags: Memory corruption, CWE-1284
- [WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability](https://agentprime.io/advisories/CVE-2024-30516.md)
  `CVE-2024-30516` · CVE record: SaasProject Booking Package · CVSS 7.5 High · Not analysed yet · Published 5 Jan 2026 · Tags: CWE-1284
- [Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration](https://agentprime.io/advisories/GHSA-2mj3-6grc-px38.md)
  `GHSA-2mj3-6grc-px38`, `CVE-2025-68383`, `GO-2025-4252` · Go `github.com/elastic/beats` and 1 more: affected `<=7.6.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Memory corruption, CWE-1284
- [kristapsdz openrsync: openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms…](https://agentprime.io/advisories/CVE-2025-67901.md)
  `CVE-2025-67901` · CVE record: kristapsdz openrsync · CVSS 5.3 Medium · Not analysed yet · Published 14 Dec 2025 · Tags: CWE-1284
- [IBM Controller Denial of Service](https://agentprime.io/advisories/CVE-2025-36015.md)
  `CVE-2025-36015` · CVE record: IBM Controller and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-1284
- [NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored b...](https://agentprime.io/advisories/PYSEC-2025-89.md)
  `PYSEC-2025-89`, `CVE-2025-65548` · PyPI `cashu`: affected `<0.18.0`, fixed in `0.18.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-1284
- [Improper validation of \<img> tag size in Text component parser](https://agentprime.io/advisories/CVE-2025-12385.md)
  `CVE-2025-12385` · CVE record: Qt Qt · CVSS 8.7 High · Not analysed yet · Published 3 Dec 2025 · Tags: Denial of service, CWE-1284
- [NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.](https://agentprime.io/advisories/CVE-2025-33211.md)
  `CVE-2025-33211` · CVE record: NVIDIA Triton Inference Server · CVSS 7.5 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-1284
- [KDE Krita: In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based…](https://agentprime.io/advisories/CVE-2025-59820.md)
  `CVE-2025-59820` · CVE record: KDE Krita · CVSS 6.7 Medium · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-1284
- [Time-series operations may cause internal BSON size limit to be exceed](https://agentprime.io/advisories/CVE-2025-13507.md)
  `CVE-2025-13507` · CVE record: MongoDB Inc. MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-1284
- [The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead o…](https://agentprime.io/advisories/CVE-2025-54515.md)
  `CVE-2025-54515` · CVE record: AMD Versal™ Adaptive SoC Devices and 4 more · CVSS 1.0 Low · Not analysed yet · Published 23 Nov 2025 · Tags: CWE-1284
- [The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the…](https://agentprime.io/advisories/CVE-2025-48507.md)
  `CVE-2025-48507` · CVE record: AMD Kria™ SOM and 2 more · CVSS 8.6 High · Not analysed yet · Published 23 Nov 2025 · Tags: CWE-1284
- [N-central unauthenticated sessionID generation](https://agentprime.io/advisories/CVE-2025-9316.md)
  `CVE-2025-9316` · CVE record: N-able N-central · CVSS 6.9 Medium · EPSS 0.37 · Not analysed yet · Published 12 Nov 2025 · Tags: CWE-1284
- [Denial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU module](https://agentprime.io/advisories/CVE-2025-10259.md)
  `CVE-2025-10259` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-1284
- [IBM Business Automation Insights improper input validation](https://agentprime.io/advisories/CVE-2025-36092.md)
  `CVE-2025-36092` · CVE record: IBM Cloud Pak For Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-1284
- [Luksmeta: data corruption when handling luks1 partitions with luksmeta](https://agentprime.io/advisories/CVE-2025-11568.md)
  `CVE-2025-11568` · CVE record: Latchset luksmeta and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284
- [BIG-IP Advanced WAF and ASM bd process vulnerability](https://agentprime.io/advisories/CVE-2025-61938.md)
  `CVE-2025-61938` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284
- [ywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input](https://agentprime.io/advisories/CVE-2025-11594.md)
  `CVE-2025-11594` · CVE record: ywxbear PHP-Bookstore-Website-Example and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-703, CWE-1284
- [In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the l…](https://agentprime.io/advisories/CVE-2025-0038.md)
  `CVE-2025-0038` · CVE record: AMD Kria(TM) SOM and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Oct 2025 · Tags: CWE-1284
- [Liferay Portal has Improper Validation of Specified Quantity in Input](https://agentprime.io/advisories/GHSA-xvgg-9h29-4g34.md)
  `GHSA-xvgg-9h29-4g34`, `CVE-2025-43793` · Maven `com.liferay.portal:com.liferay.portal.impl` and 1 more: affected `<96.0.0`, fixed in `96.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-1284
- [Improper Validation of Specified Quantity in Input in GitLab](https://agentprime.io/advisories/CVE-2025-2256.md)
  `CVE-2025-2256` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 12 Sept 2025 · Tags: CWE-1284
- [Improper Validation of Specified Quantity in Input in GitLab](https://agentprime.io/advisories/CVE-2025-10094.md)
  `CVE-2025-10094` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: CWE-1284
- [WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability](https://agentprime.io/advisories/CVE-2025-32689.md)
  `CVE-2025-32689` · CVE record: Convers Lab WP SmartPay · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1284
- [Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.](https://agentprime.io/advisories/CVE-2024-36346.md)
  `CVE-2024-36346` · CVE record: AMD AMD Instinct™ MI300A and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-1284
- [WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability](https://agentprime.io/advisories/CVE-2025-58835.md)
  `CVE-2025-58835` · CVE record: calliko Bonus for Woo · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-1284
- [Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset](https://agentprime.io/advisories/CVE-2025-5808.md)
  `CVE-2025-5808` · CVE record: OpenText Self Service Password Reset · CVSS 7.3 High · Not analysed yet · Published 29 Aug 2025 · Tags: CWE-1284
- [Improper access control on the NetScaler Management Interface](https://agentprime.io/advisories/CVE-2025-8424.md)
  `CVE-2025-8424` · CVE record: NetScaler ADC and 1 more · CVSS 8.7 High · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-1284
- [An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.](https://agentprime.io/advisories/CVE-2025-55398.md)
  `CVE-2025-55398` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Aug 2025 · Tags: CWE-1284
- [Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-8320.md)
  `CVE-2025-8320` · CVE record: Tesla Wall Connector · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2025 · Tags: CWE-1284
- [SYNCK GRAPHICA Real-time Bus Tracking System: Improper validation of specified quantity in input issue exists in Real-time Bus Tracking…](https://agentprime.io/advisories/CVE-2025-43881.md)
  `CVE-2025-43881` · CVE record: SYNCK GRAPHICA Real-time Bus Tracking System · CVSS 5.3 Medium · Not analysed yet · Published 23 Jul 2025 · Tags: CWE-1284
- [Incorrect authentication in ParkingDoor](https://agentprime.io/advisories/CVE-2025-41100.md)
  `CVE-2025-41100` · CVE record: ParkingDoor ParkingDoor · CVSS 5.9 Medium · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-1284
- [resolv vulnerable to DoS via insufficient DNS domain name length validation](https://agentprime.io/advisories/GHSA-xh69-987w-hrp8.md)
  `GHSA-xh69-987w-hrp8`, `CVE-2025-24294` · RubyGems `resolv`: affected `<0.2.3 || >=0.3.0, <0.3.1 || >=0.4.0, <0.6.2`, fixed in `0.2.3`, `0.3.1`, `0.6.2` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jul 2025 · Tags: Denial of service, CWE-1284
- [NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read](https://agentprime.io/advisories/CVE-2025-4365.md)
  `CVE-2025-4365` · CVE record: NetScaler Console and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-1284
- [NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface](https://agentprime.io/advisories/CVE-2025-5349.md)
  `CVE-2025-5349` · CVE record: NetScaler ADC · CVSS 8.7 High · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-1284
- [WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-49292.md)
  `CVE-2025-49292` · CVE record: Cozmoslabs Profile Builder · CVSS 4.3 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-1284
- [Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure](https://agentprime.io/advisories/GHSA-cqx4-9vqf-q3m8.md)
  `GHSA-cqx4-9vqf-q3m8`, `CVE-2025-5257`, `PKSA-x59g-t3yz-wmhz` · Packagist `mautic/core`: affected `>=4.0.0, <4.4.16 || >=5.0.0-alpha, <5.2.6 || >=6.0.0-alpha, <6.0.2`, fixed in `4.4.16`, `5.2.6`, `6.0.2` · CVSS 6.5 Medium · Not analysed yet · Published 28 May 2025 · Tags: Broken access control, CWE-1284
- [n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…](https://agentprime.io/advisories/CVE-2025-2826.md)
  `CVE-2025-2826` · CVE record: Arista Networks EOS · CVSS 2.6 Low · Not analysed yet · Published 27 May 2025 · Tags: CWE-1284
- [On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the…](https://agentprime.io/advisories/CVE-2024-9448.md)
  `CVE-2024-9448` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 8 May 2025 · Tags: CWE-1284
- [markdownify allows large headline prefixes such as \<h9999999>, which causes memory consumption](https://agentprime.io/advisories/GHSA-7mpr-5m44-h73r.md)
  `GHSA-7mpr-5m44-h73r`, `CVE-2025-46656`, `PYSEC-2026-1604` · PyPI `markdownify`: affected `<0.14.1`, fixed in `0.14.1` · CVSS 2.9 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-1284
- [Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Di…](https://agentprime.io/advisories/CVE-2025-3511.md)
  `CVE-2025-3511` · CVE record: Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Apr 2025 · Tags: CWE-1284
- [GoBGP crashes in the flowspec parser](https://agentprime.io/advisories/GHSA-mfvv-mgf6-q25r.md)
  `GHSA-mfvv-mgf6-q25r`, `CVE-2025-43972`, `GO-2025-3632` · Go `github.com/osrg/gobgp` and 1 more: affected `*`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-1284
- [GoBGP does not properly check the input length](https://agentprime.io/advisories/GHSA-hqhq-hp5x-xp3w.md)
  `GHSA-hqhq-hp5x-xp3w`, `CVE-2025-43970`, `GO-2025-3630` · Go `github.com/osrg/gobgp` and 1 more: affected `*`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-1284
- [LibRaw: In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in…](https://agentprime.io/advisories/CVE-2025-43964.md)
  `CVE-2025-43964` · CVE record: LibRaw LibRaw · CVSS 2.9 Low · Not analysed yet · Published 20 Apr 2025 · Tags: CWE-1284
- [NamelessMC Has Lack of Length Validation for s Parameter in GET Requests](https://agentprime.io/advisories/CVE-2025-29784.md)
  `CVE-2025-29784` · CVE record: NamelessMC Nameless · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-20, CWE-130, CWE-1284
- [xmlsoft libxml2: In libxml2 before 2.13.8 and 2.14.x before 2.14.2…](https://agentprime.io/advisories/CVE-2025-32415.md)
  `CVE-2025-32415` · CVE record: xmlsoft libxml2 · CVSS 2.9 Low · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-1284
- [GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory](https://agentprime.io/advisories/CVE-2025-25178.md)
  `CVE-2025-25178` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-1284
- [Game center application has code execution Vulnerability](https://agentprime.io/advisories/CVE-2024-45351.md)
  `CVE-2024-45351` · CVE record: Xiaomi Game center application · CVSS 7.8 High · Not analysed yet · Published 26 Mar 2025 · Tags: CWE-1284
- [On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being ins…](https://agentprime.io/advisories/CVE-2024-8000.md)
  `CVE-2024-8000` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1284
- [NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump…](https://agentprime.io/advisories/CVE-2024-53879.md)
  `CVE-2024-53879` · CVE record: NVIDIA CUDA Toolkit · CVSS 2.8 Low · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-1284
- [NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump…](https://agentprime.io/advisories/CVE-2024-53878.md)
  `CVE-2024-53878` · CVE record: NVIDIA CUDA Toolkit · CVSS 2.8 Low · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-1284
- [Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidential…](https://agentprime.io/advisories/CVE-2023-20508.md)
  `CVE-2023-20508` · CVE record: AMD AMD Radeon™ RX 6000 Series Graphics Products and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1284
- [Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of…](https://agentprime.io/advisories/CVE-2023-31331.md)
  `CVE-2023-31331` · CVE record: AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics and 4 more · CVSS 3.0 Low · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1284
- [Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a l…](https://agentprime.io/advisories/CVE-2023-20582.md)
  `CVE-2023-20582` · CVE record: AMD AMD EPYC™ 9004 Processors and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1284
- [Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity.](https://agentprime.io/advisories/CVE-2023-20581.md)
  `CVE-2023-20581` · CVE record: AMD AMD EPYC™ 9004 Processors and 1 more · CVSS 2.5 Low · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1284

Newest: <https://agentprime.io/advisories/tag/cwe-1284.md>
Older: <https://agentprime.io/advisories/tag/cwe-1284.md?cursor=WyIyMDI1LTAyLTExVDIxOjI2OjExLjEyODAwMFoiLCJDVkUtMjAyMy0yMDU4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1284&cursor=WyIyMDI2LTAxLTE2VDE5OjA5OjMzLjUxMTAwMFoiLCJDVkUtMjAyMS00NzgzMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1284/?cursor=WyIyMDI2LTAxLTE2VDE5OjA5OjMzLjUxMTAwMFoiLCJDVkUtMjAyMS00NzgzMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.