CWE-1286.

Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict

• CWE-20
• CWE-436

<7.0.7 · fixed in 7.0.7

IBM Planning Analytics Local information disclosure

• IBM Planning Analytics Local
• CWE-1286

github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input

• CWE-1286

<1.2.2 · fixed in 1.2.2

Asterisk remotely exploitable leak of RTP UDP ports and internal resources

• asterisk
• Denial of service
• CWE-1286

Microsoft Exchange Server Spoofing Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• CWE-1286

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

• CWE-1286

<0.27.0 · fixed in 0.27.0

Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.

• Brother Industries, Ltd HL-L8260CDN
• Brother Industries, Ltd HL-L8260CDW
• CWE-1286

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

• Brother Industries, Ltd HL-L8260CDN
• Brother Industries, Ltd HL-L8260CDW
• CWE-1286

Denial of service due to improper handling of malformed input.

• Acronis Cyber Protect Cloud Agent
• Acronis Cyber Protect 17
• CWE-1286

F5OS-A/C CLI vulnerability

• F5OS - Appliance
• F5OS - Chassis
• CWE-149
• CWE-1286

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configuration f…

• Bosch Rexroth AG ctrlX OS - Device Admin
• CWE-1286

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network configuration file via a…

• Bosch Rexroth AG ctrlX OS - Device Admin
• CWE-1286

A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP req…

• Bosch Rexroth AG ctrlX OS - Device Admin
• CWE-1286

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a cr…

• Bosch Rexroth AG ctrlX OS - Device Admin
• CWE-1286

Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.

• Westermo WeOS
• CWE-1286

Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability

• CWE-1286

<2.11.24 · fixed in 2.11.24

IBM App Connect Enterprise Certified Container denial of service

• IBM App Connect Enterprise Certified Container
• CWE-1286

In Modem, there is a possible memory corruption due to incorrect error handling.

• MediaTek, Inc. MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8673, MT8791T, MT8795T, MT8798
• CWE-1286

Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly: A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly…

• Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly
• Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC
• CWE-1286

Routinator crashes when illegal characters are present in manifest file names

• NLnet Labs Routinator
• CWE-1286

Axis Communications AB AXIS OS: Erik de Jong, member of the AXIS OS Bug Bounty Program…

• Axis Communications AB AXIS OS
• CWE-1286

Axis Communications AB AXIS OS: 51l3nc3, member of the AXIS OS Bug Bounty Program…

• Axis Communications AB AXIS OS
• CWE-1286

Eclipse Jetty URI parsing of invalid authority

• CWE-1286

>=7.0.0, <12.0.12 · fixed in 12.0.12

Denial of Service in TYPO3 Bookmark Toolbar

• CWE-248
• CWE-1286

>=10.0.0, <10.4.46 || >=11.0.0, <11.5.40 || >=12.0.0, <12.4.21 || >=13.0.0, <13.3.1 · fixed in 10.4.46, 11.5.40, 12.4.21, 13.3.1

Axis Communications AB AXIS OS: 51l3nc3, member of the AXIS OS Bug Bounty Program…

• Axis Communications AB AXIS OS
• CWE-1286

SPIP porte_plume Plugin Arbitrary PHP Execution

• SPIP
• Code injection
• CWE-1286

Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1286

github.com/google/nftable IP addresses were encoded in the wrong byte order

• CWE-20
• CWE-1286

>=0.1.0, <0.2.0 · fixed in 0.2.0

An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated wi…

• CWE-1286

Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to cause a partial DoS of web interface via HTTP POST r…

• CWE-1286

Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1286

PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

• Palo Alto Networks PAN-OS
• Palo Alto Networks Cloud NGFW
• CWE-1286

DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

• Nozomi Networks Guardian
• CWE-1286

DJI Mini 3 Pro: An Improper Input Validation vulnerability affecting the FTP service running on the DJI…

• DJI Mini 3 Pro
• CWE-1286

Express.js Open Redirect in malformed URLs

• Open redirect
• CWE-1286

<4.19.2 || >=5.0.0-alpha.1, <5.0.0-beta.3 · fixed in 4.19.2, 5.0.0-beta.3

Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail

• Juniper Networks Junos OS
• CWE-1286

Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang

• Juniper Networks Junos OS
• CWE-1286

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1286

DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

• Nozomi Networks Guardian
• Nozomi Networks CMC
• CWE-1286

DoS via SAML configuration in Guardian/CMC before 22.6.2

• Nozomi Networks Guardian
• Nozomi Networks CMC
• CWE-1286

Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2

• Nozomi Networks Guardian
• Nozomi Networks CMC
• CWE-1286

Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication

• Axis Communications AB AXIS A1001 Network Door Controller
• Axis Communications AB AXIS A1210-B Network Door Controller
• CWE-754
• CWE-1286

SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received

• Juniper Networks Junos OS
• CWE-1286

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character.

• CWE-20
• CWE-1286

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• Siemens SIMATIC Drive Controller CPU 1504D TF
• Siemens SIMATIC Drive Controller CPU 1507D TF
• CWE-1286

Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device

• Juniper Networks Junos OS Evolved
• CWE-1286

protobuf-cpp and protobuf-python have potential Denial of Service issue

• Memory corruption
• CWE-1286

<3.18.3 || >=3.19.0, <3.19.5 || >=3.20.0, <3.20.2 || >=4.0.0, <4.21.6 · fixed in 3.18.3, 3.19.5, 3.20.2, 4.21.6

Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet

• Juniper Networks Junos OS
• CWE-1286

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary S…

• Axis Communications AB AXIS OS
• CWE-1286

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.

• Axis Communications AB AXIS OS
• CWE-1286

Command Injection Vulnerability in Video Station

• QNAP Systems Inc. Video Station
• Command injection
• CWE-1286

Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input

• Philips Patient Information Center iX (PICiX)
• Philips PerformanceBridge Focal Point
• CWE-1286