# CWE-1287.

Every Advisory and CVE whose sources give the weakness CWE-1287, newest first.

## Records, newest first (an older page)

- [MobSF Partial Denial of Service (DoS)](https://agentprime.io/advisories/GHSA-jrm8-xgf3-fwqr.md)
  `GHSA-jrm8-xgf3-fwqr`, `CVE-2025-24804`, `PYSEC-2026-1674` · PyPI `mobsf`: affected `<4.3.1`, fixed in `4.3.1` · CVSS 4.8 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-1287
- [A remote code vulnerability has been discovered in OpenText™ Content Management.](https://agentprime.io/advisories/CVE-2024-8125.md)
  `CVE-2024-8125` · CVE record: OpenText™ Content Management (Extended ECM) · CVSS 5.4 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-1287
- [Mattermost webapp crash via a crafted post](https://agentprime.io/advisories/GHSA-w6xh-c82w-h997.md)
  `GHSA-w6xh-c82w-h997`, `CVE-2025-20621`, `GO-2025-3407` · Go `github.com/mattermost/mattermost/server/v8`: affected `<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1`, fixed in `8.0.0-20241127161322-25ff7a3779a5`, `9.11.6`, `10.0.4`, `10.1.4`, `10.2.1` · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: CWE-1287
- [Mobile crash via object that can't be cast to String in Attachment Field](https://agentprime.io/advisories/CVE-2025-20630.md)
  `CVE-2025-20630` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: CWE-1287
- [Mobile crash via file with specially crafted filename](https://agentprime.io/advisories/CVE-2025-0476.md)
  `CVE-2025-0476` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287
- [Mattermost fails to properly validate post props](https://agentprime.io/advisories/GHSA-5m7j-6gc4-ff5g.md)
  `GHSA-5m7j-6gc4-ff5g`, `CVE-2025-20086`, `GO-2025-3392` · Go `github.com/mattermost/mattermost/server/v8`: affected `<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1`, fixed in `8.0.0-20241127161322-25ff7a3779a5`, `9.11.6`, `10.0.4`, `10.1.4`, `10.2.1` · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287
- [Mattermost fails to properly validate post props](https://agentprime.io/advisories/GHSA-45v9-w9fh-33j6.md)
  `GHSA-45v9-w9fh-33j6`, `CVE-2025-20088`, `GO-2025-3394` · Go `github.com/mattermost/mattermost/server/v8`: affected `<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1`, fixed in `8.0.0-20241127161322-25ff7a3779a5`, `9.11.6`, `10.0.4`, `10.1.4`, `10.2.1` · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287
- [Insufficient Input Validation on Post Props](https://agentprime.io/advisories/CVE-2025-21083.md)
  `CVE-2025-21083` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287
- [Insufficient Input Validation on Post Props](https://agentprime.io/advisories/CVE-2025-20036.md)
  `CVE-2025-20036` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287
- [Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform](https://agentprime.io/advisories/CVE-2024-48858.md)
  `CVE-2024-48858` · CVE record: BlackBerry QNX Software Development Platform (SDP) · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-1287
- [Mattermost Improper Validation of Specified Type of Input vulnerability](https://agentprime.io/advisories/GHSA-2549-xh72-qrpm.md)
  `GHSA-2549-xh72-qrpm`, `CVE-2025-20033`, `GO-2025-3379` · Go `github.com/mattermost/mattermost/server/v8`: affected `<8.0.0-20250102081831-64c566a8280b || >=9.11.0, <9.11.16 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1`, fixed in `8.0.0-20250102081831-64c566a8280b`, `9.11.16`, `10.0.4`, `10.1.4`, `10.2.1` · CVSS 4.3 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-1287
- [OpenVPN: OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker…](https://agentprime.io/advisories/CVE-2024-5594.md)
  `CVE-2024-5594` · CVE record: OpenVPN OpenVPN · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-1287
- [Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-69pr-78gv-7c6h.md)
  `GHSA-69pr-78gv-7c6h`, `CVE-2024-54083`, `GO-2024-3337` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=9.5.0+incompatible, <9.5.13+incompatible || >=9.11.0+incompatible, <9.11.5+incompatible || >=10.0.0+incompatible, <10.0.3+incompatible || >=10.1.0+incompatible, <10.1.3+incompatible`, fixed in `9.5.13+incompatible`, `9.11.5+incompatible`, `10.0.3+incompatible`, `10.1.3+incompatible` · CVSS 6.5 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-1287
- [Lenovo FileZ Client: An improper parsing vulnerability was reported in the FileZ client that could allow a…](https://agentprime.io/advisories/CVE-2024-8058.md)
  `CVE-2024-8058` · CVE record: Lenovo FileZ Client · CVSS 7.6 High · Not analysed yet · Published 16 Dec 2024 · Tags: CWE-1287
- [Default Credentials](https://agentprime.io/advisories/CVE-2024-51551.md)
  `CVE-2024-51551` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287
- [Data Validation / Sanitization](https://agentprime.io/advisories/CVE-2024-51550.md)
  `CVE-2024-51550` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287
- [Credentails Disclosure](https://agentprime.io/advisories/CVE-2024-51546.md)
  `CVE-2024-51546` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287
- [Denial-of-Service Vulnerability](https://agentprime.io/advisories/CVE-2024-9404.md)
  `CVE-2024-9404` · CVE record: Moxa VPort 07-3 Series and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-1287
- [Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP Module](https://agentprime.io/advisories/CVE-2024-8403.md)
  `CVE-2024-8403` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-1287
- [Moodle has arbitrary file read risk through pdfTeX](https://agentprime.io/advisories/GHSA-vjmm-r9gg-425m.md)
  `GHSA-vjmm-r9gg-425m`, `BIT-moodle-2024-43426`, `CVE-2024-43426`, `PKSA-c8xb-byc5-1chb` · Packagist `moodle/moodle`: affected `<4.1.12 || >=4.2.0-beta, <4.2.9 || >=4.3.0-beta, <4.3.6 || >=4.4.0-beta, <4.4.2`, fixed in `4.1.12`, `4.2.9`, `4.3.6`, `4.4.2` · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2024 · Tags: CWE-1287
- [Insecure loose comparison in Enel X JuiceBox](https://agentprime.io/advisories/CVE-2023-29126.md)
  `CVE-2023-29126` · CVE record: Enel X JuiceBox Pro 3.0 22kW Cellular · CVSS 4.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-1287
- [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security…](https://agentprime.io/advisories/CVE-2024-20494.md)
  `CVE-2024-20494` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1287
- [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security…](https://agentprime.io/advisories/CVE-2024-20408.md)
  `CVE-2024-20408` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1287
- [Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash](https://agentprime.io/advisories/CVE-2024-47504.md)
  `CVE-2024-47504` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-1287
- [Multiple MiCard PLUS card reader dropped characters](https://agentprime.io/advisories/CVE-2024-1578.md)
  `CVE-2024-1578` · CVE record: Rebranded by NT-ware (originally developed and provided by rf IDEAS) MiCard PLUS Ci and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-1287
- [Google Chrome: Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62…](https://agentprime.io/advisories/CVE-2024-3175.md)
  `CVE-2024-3175` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-1287
- [Jelly Template Injection Vulnerability in ServiceNow UI Macros](https://agentprime.io/advisories/CVE-2024-4879.md)
  `CVE-2024-4879` · CVE record: ServiceNow Now Platform · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-1287
- [remote code execution](https://agentprime.io/advisories/CVE-2024-6298.md)
  `CVE-2024-6298` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-1287
- [IBM QRadar Suite improper input validation](https://agentprime.io/advisories/CVE-2023-47726.md)
  `CVE-2023-47726` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-1287
- [Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)](https://agentprime.io/advisories/CVE-2024-35213.md)
  `CVE-2024-35213` · CVE record: BlackBerry QNX Software Development Platform (SDP) · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-1287
- [IBM QRadar Suite Software file manipulation](https://agentprime.io/advisories/CVE-2023-47727.md)
  `CVE-2023-47727` · CVE record: IBM Cloud Pak for Security and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 2 May 2024 · Tags: CWE-1287
- [Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-30395.md)
  `CVE-2024-30395` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1287
- [In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.](https://agentprime.io/advisories/CVE-2024-31948.md)
  `CVE-2024-31948` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 7 Apr 2024 · Tags: CWE-1287
- [The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access contr…](https://agentprime.io/advisories/CVE-2021-47156.md)
  `CVE-2021-47156` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-1287
- [Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper validation of specified type of input for some Intel(R) PROSet/Wireless and…](https://agentprime.io/advisories/CVE-2023-32651.md)
  `CVE-2023-32651` · CVE record: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-1287
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-3904.md)
  `CVE-2023-3904` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 15 Dec 2023 · Tags: CWE-1287
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-3917.md)
  `CVE-2023-3917` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2023 · Tags: CWE-1287
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-3906.md)
  `CVE-2023-3906` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 29 Sept 2023 · Tags: CWE-1287
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-4522.md)
  `CVE-2023-4522` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-1287
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-3900.md)
  `CVE-2023-3900` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-1287
- [A URL parameter during login flow was vulnerable to injection.](https://agentprime.io/advisories/CVE-2023-28799.md)
  `CVE-2023-28799` · CVE record: Zscaler Client Connector · CVSS 8.2 High · Not analysed yet · Published 22 Jun 2023 · Tags: CWE-1287
- [Kubelet vulnerable to bypass of seccomp profile enforcement](https://agentprime.io/advisories/GHSA-xc8m-28vv-4pjc.md)
  `GHSA-xc8m-28vv-4pjc`, `CVE-2023-2431`, `GO-2023-1864` · Go `k8s.io/kubernetes`: affected `<1.24.14 || >=1.25.0, <1.25.10 || >=1.26.0, <1.26.5 || >=1.27.0, <1.27.2`, fixed in `1.24.14`, `1.25.10`, `1.26.5`, `1.27.2` · CVSS 3.4 Low · Not analysed yet · Published 16 Jun 2023 · Tags: CWE-1287
- [PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation](https://agentprime.io/advisories/CVE-2023-2673.md)
  `CVE-2023-2673` · CVE record: PHOENIX CONTACT FL MGUARD 2102 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-1287
- [Improper input validation in Siemens SICAM PAS/PQS](https://agentprime.io/advisories/CVE-2022-43723.md)
  `CVE-2022-43723` · CVE record: Siemens SICAM PAS/PQS · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-20, CWE-1287
- [Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.](https://agentprime.io/advisories/CVE-2021-44694.md)
  `CVE-2021-44694` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1287
- [phpCAS vulnerable to Service Hostname Discovery Exploitation](https://agentprime.io/advisories/GHSA-8q72-6qq8-xv64.md)
  `GHSA-8q72-6qq8-xv64`, `CVE-2022-39369`, `PKSA-4b9f-kpvb-8rtq` · Packagist `apereo/phpcas`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 8.0 High · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-99, CWE-1287
- [Insufficient validation when decoding a Socket.IO packet](https://agentprime.io/advisories/GHSA-qm95-pgcg-qqfq.md)
  `GHSA-qm95-pgcg-qqfq`, `CVE-2022-2421` · npm `socket.io-parser`: affected `<3.3.3 || >=3.4.0, <3.4.2 || >=4.0.0, <4.0.5 || >=4.1.0, <4.2.1`, fixed in `3.3.3`, `3.4.2`, `4.0.5`, `4.2.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2022 · Tags: SQL injection, CWE-20, CWE-1287
- [Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet](https://agentprime.io/advisories/CVE-2022-22228.md)
  `CVE-2022-22228` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1287
- [Privilege escalation from administrator in eLabFTW](https://agentprime.io/advisories/CVE-2022-31007.md)
  `CVE-2022-31007` · CVE record: elabftw elabftw · CVSS 4.9 Medium · EPSS 0.27 · Not analysed yet · Published 31 May 2022 · Tags: CWE-842, CWE-1287
- [Insufficient type validation in pocketmine/pocketmine-mp](https://agentprime.io/advisories/GHSA-g5rr-p69h-7v3g.md)
  `GHSA-g5rr-p69h-7v3g`, `CVE-2022-51012`, `PKSA-8sgq-z2gv-62hz` · Packagist `pocketmine/pocketmine-mp`: affected `<4.2.9`, fixed in `4.2.9` · CVSS 7.1 High · Not analysed yet · Published 22 Apr 2022 · Tags: CWE-20, CWE-1287
- [Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20783.md)
  `CVE-2022-20783` · CVE record: Cisco Cisco RoomOS Software · CVSS 7.5 High · Not analysed yet · Published 21 Apr 2022 · Tags: CWE-1287
- [Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot](https://agentprime.io/advisories/CVE-2022-22168.md)
  `CVE-2022-22168` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Denial of service, CWE-1287
- [A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.](https://agentprime.io/advisories/CVE-2021-32024.md)
  `CVE-2021-32024` · CVE record: BlackBerry QNX Software Development Platform (SDP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Dec 2021 · Tags: CWE-1287
- [Admin privilege escalation and arbitrary code execution via malicious \*.etherpad imports](https://agentprime.io/advisories/CVE-2021-43802.md)
  `CVE-2021-43802` · CVE record: ether etherpad-lite · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2021 · Tags: CWE-790, CWE-1287
- [go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON](https://agentprime.io/advisories/GHSA-f6mq-5m25-4r72.md)
  `GHSA-f6mq-5m25-4r72`, `CVE-2021-20329`, `GO-2021-0112` · Go `go.mongodb.org/mongo-driver`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 6.8 Medium · Not analysed yet · Published 15 Jun 2021 · Tags: CWE-20, CWE-1287

Newest: <https://agentprime.io/advisories/tag/cwe-1287.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1287&cursor=WyIyMDI1LTAyLTEwVDE3OjQyOjQzLjAwMDAwMFoiLCJHSFNBLTdmYzUtZjgyZi1jeDY5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1287/?cursor=WyIyMDI1LTAyLTEwVDE3OjQyOjQzLjAwMDAwMFoiLCJHSFNBLTdmYzUtZjgyZi1jeDY5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.