CWE-1284.

WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service

• WebSSH for iOS
• CWE-1284

iDailyDiary 4.30 - Denial of Service (PoC)

• Splinterware iDailyDiary
• CWE-1284

RarmaRadio 2.72.8 - Denial of Service

• Raimersoft RarmaRadio
• CWE-1284

DupTerminator 1.4.5639.37199 - Denial of Service

• DupTerminator
• CWE-1284

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

• Sysax Multi Server
• CWE-1284

iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

• InternationalColorConsortium iccDEV
• Memory corruption
• Denial of service

Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read

• silabs.com Z-Wave Protocol Controller
• Memory corruption
• CWE-1284

WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

• SaasProject Booking Package
• CWE-1284

Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration

• Memory corruption
• CWE-1284

<=7.6.2 · no fixed version yet

kristapsdz openrsync: openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms…

• kristapsdz openrsync
• CWE-1284

IBM Controller Denial of Service

• IBM Controller
• IBM Cognos Controller
• CWE-1284

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored b...

• CWE-1284

<0.18.0 · fixed in 0.18.0

Improper validation of <img> tag size in Text component parser

• Qt
• Denial of service
• CWE-1284

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.

• NVIDIA Triton Inference Server
• CWE-1284

KDE Krita: In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based…

• KDE Krita
• CWE-1284

Time-series operations may cause internal BSON size limit to be exceed

• MongoDB Inc. MongoDB Server
• CWE-1284

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead o…

• AMD Versal™ Adaptive SoC Devices
• AMD Versal™ RF Series
• CWE-1284

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the…

• AMD Kria™ SOM
• AMD Zynq™ UltraScale+™ MPSoCs
• CWE-1284

N-central unauthenticated sessionID generation

• N-able N-central
• CWE-1284

Denial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
• CWE-1284

IBM Business Automation Insights improper input validation

• IBM Cloud Pak For Business Automation
• CWE-1284

Luksmeta: data corruption when handling luks1 partitions with luksmeta

• Latchset luksmeta
• Red Hat Enterprise Linux 10
• CWE-1284

BIG-IP Advanced WAF and ASM bd process vulnerability

• F5 BIG-IP
• CWE-1284

ywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input

• ywxbear PHP-Bookstore-Website-Example
• ywxbear PHP Basic BookStore Website
• CWE-703
• CWE-1284

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the l…

• AMD Kria(TM) SOM
• AMD Zynq UltraScale+ MPSoCs
• CWE-1284

Liferay Portal has Improper Validation of Specified Quantity in Input

• CWE-1284

<96.0.0 · fixed in 96.0.0

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability

• Convers Lab WP SmartPay
• CWE-1284

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.

• AMD Instinct™ MI300A
• AMD Instinct™ MI300X
• CWE-1284

WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability

• calliko Bonus for Woo
• CWE-1284

Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset

• OpenText Self Service Password Reset
• CWE-1284

Improper access control on the NetScaler Management Interface

• NetScaler ADC
• NetScaler Gateway
• CWE-1284

An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.

• CWE-1284

Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability

• Tesla Wall Connector
• CWE-1284

SYNCK GRAPHICA Real-time Bus Tracking System: Improper validation of specified quantity in input issue exists in Real-time Bus Tracking…

• SYNCK GRAPHICA Real-time Bus Tracking System
• CWE-1284

Incorrect authentication in ParkingDoor

• ParkingDoor
• CWE-1284

resolv vulnerable to DoS via insufficient DNS domain name length validation

• Denial of service
• CWE-1284

<0.2.3 || >=0.3.0, <0.3.1 || >=0.4.0, <0.6.2 · fixed in 0.2.3, 0.3.1, 0.6.2

NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

• NetScaler Console
• NetScaler SDX (SVM)
• CWE-1284

NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

• NetScaler ADC
• CWE-1284

WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability

• Cozmoslabs Profile Builder
• CWE-1284

Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure

• Broken access control
• CWE-1284

>=4.0.0, <4.4.16 || >=5.0.0-alpha, <5.2.6 || >=6.0.0-alpha, <6.0.2 · fixed in 4.4.16, 5.2.6, 6.0.2

n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…

• Arista Networks EOS
• CWE-1284

On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the…

• Arista Networks EOS
• CWE-1284

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

• CWE-1284

<0.14.1 · fixed in 0.14.1

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Di…

• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D
• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T
• CWE-1284

GoBGP crashes in the flowspec parser

• CWE-1284

* · no fixed version yet

GoBGP does not properly check the input length

• CWE-1284

* · no fixed version yet

LibRaw: In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in…

• LibRaw
• CWE-1284

NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

• Nameless
• CWE-20
• CWE-130

xmlsoft libxml2: In libxml2 before 2.13.8 and 2.14.x before 2.14.2…

• xmlsoft libxml2
• CWE-1284

GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory

• Imagination Technologies Graphics DDK
• CWE-1284

Game center application has code execution Vulnerability

• Xiaomi Game center application
• CWE-1284

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being ins…

• Arista Networks EOS
• CWE-1284

NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump…

• NVIDIA CUDA Toolkit
• CWE-1284

NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump…

• NVIDIA CUDA Toolkit
• CWE-1284

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidential…

• AMD Radeon™ RX 6000 Series Graphics Products
• AMD Radeon™ PRO W6000 Series Graphics Products
• CWE-1284

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of…

• AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
• AMD Ryzen™ 7000 Series Desktop Processors
• CWE-1284

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a l…

• AMD EPYC™ 9004 Processors
• AMD EPYC™ Embedded 9004
• CWE-1284

Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity.

• AMD EPYC™ 9004 Processors
• AMD EPYC™ Embedded 9004
• CWE-1284