CWE-1287.

MobSF Partial Denial of Service (DoS)

• CWE-1287

<4.3.1 · fixed in 4.3.1

A remote code vulnerability has been discovered in OpenText™ Content Management.

• OpenText™ Content Management (Extended ECM)
• CWE-1287

Mattermost webapp crash via a crafted post

• CWE-1287

<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1 · fixed in 8.0.0-20241127161322-25ff7a3779a5, 9.11.6, 10.0.4, 10.1.4, 10.2.1

Mobile crash via object that can't be cast to String in Attachment Field

• Mattermost
• CWE-1287

Mobile crash via file with specially crafted filename

• Mattermost
• CWE-1287

Mattermost fails to properly validate post props

• CWE-1287

<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1 · fixed in 8.0.0-20241127161322-25ff7a3779a5, 9.11.6, 10.0.4, 10.1.4, 10.2.1

Mattermost fails to properly validate post props

• CWE-1287

<8.0.0-20241127161322-25ff7a3779a5 || >=9.11.0, <9.11.6 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1 · fixed in 8.0.0-20241127161322-25ff7a3779a5, 9.11.6, 10.0.4, 10.1.4, 10.2.1

Insufficient Input Validation on Post Props

• Mattermost
• CWE-1287

Insufficient Input Validation on Post Props

• Mattermost
• CWE-1287

Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform

• BlackBerry QNX Software Development Platform (SDP)
• CWE-1287

Mattermost Improper Validation of Specified Type of Input vulnerability

• CWE-1287

<8.0.0-20250102081831-64c566a8280b || >=9.11.0, <9.11.16 || >=10.0.0, <10.0.4 || >=10.1.0, <10.1.4 || >=10.2.0, <10.2.1 · fixed in 8.0.0-20250102081831-64c566a8280b, 9.11.16, 10.0.4, 10.1.4, 10.2.1

OpenVPN: OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker…

• OpenVPN
• CWE-1287

Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server

• CWE-1287

>=9.5.0+incompatible, <9.5.13+incompatible || >=9.11.0+incompatible, <9.11.5+incompatible || >=10.0.0+incompatible, <10.0.3+incompatible || >=10.1.0+incompatible, <10.1.3+incompatible · fixed in 9.5.13+incompatible, 9.11.5+incompatible, 10.0.3+incompatible, 10.1.3+incompatible

Lenovo FileZ Client: An improper parsing vulnerability was reported in the FileZ client that could allow a…

• Lenovo FileZ Client
• CWE-1287

Default Credentials

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-1287

Data Validation / Sanitization

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-1287

Credentails Disclosure

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-1287

Denial-of-Service Vulnerability

• Moxa VPort 07-3 Series
• Moxa EDS-608 Series
• CWE-1287

Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP Module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP
• CWE-1287

Moodle has arbitrary file read risk through pdfTeX

• CWE-1287

<4.1.12 || >=4.2.0-beta, <4.2.9 || >=4.3.0-beta, <4.3.6 || >=4.4.0-beta, <4.4.2 · fixed in 4.1.12, 4.2.9, 4.3.6, 4.4.2

Insecure loose comparison in Enel X JuiceBox

• Enel X JuiceBox Pro 3.0 22kW Cellular
• CWE-1287

Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security…

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-1287

Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security…

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-1287

Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash

• Juniper Networks Junos OS
• CWE-1287

Multiple MiCard PLUS card reader dropped characters

• Rebranded by NT-ware (originally developed and provided by rf IDEAS) MiCard PLUS Ci
• Rebranded by NT-ware (originally developed and provided by rf IDEAS) MiCard PLUS BLE
• CWE-1287

Google Chrome: Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62…

• Google Chrome
• CWE-1287

Jelly Template Injection Vulnerability in ServiceNow UI Macros

• ServiceNow Now Platform
• CWE-1287

remote code execution

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-1287

IBM QRadar Suite improper input validation

• IBM QRadar Suite Software
• IBM Cloud Pak for Security
• CWE-1287

Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)

• BlackBerry QNX Software Development Platform (SDP)
• CWE-1287

IBM QRadar Suite Software file manipulation

• IBM Cloud Pak for Security
• IBM QRadar Suite Software
• CWE-1287

Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1287

In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.

• CWE-1287

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access contr…

• CWE-1287

Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper validation of specified type of input for some Intel(R) PROSet/Wireless and…

• Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
• CWE-1287

Improper Validation of Specified Type of Input in GitLab

• GitLab
• CWE-1287

Improper Validation of Specified Type of Input in GitLab

• GitLab
• CWE-1287

Improper Validation of Specified Type of Input in GitLab

• GitLab
• CWE-1287

Improper Validation of Specified Type of Input in GitLab

• GitLab
• CWE-1287

Improper Validation of Specified Type of Input in GitLab

• GitLab
• CWE-1287

A URL parameter during login flow was vulnerable to injection.

• Zscaler Client Connector
• CWE-1287

Kubelet vulnerable to bypass of seccomp profile enforcement

• CWE-1287

<1.24.14 || >=1.25.0, <1.25.10 || >=1.26.0, <1.26.5 || >=1.27.0, <1.27.2 · fixed in 1.24.14, 1.25.10, 1.26.5, 1.27.2

PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

• PHOENIX CONTACT FL MGUARD 2102
• PHOENIX CONTACT FL MGUARD 4102 PCI
• CWE-1287

Improper input validation in Siemens SICAM PAS/PQS

• Siemens SICAM PAS/PQS
• CWE-20
• CWE-1287

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• Siemens SIMATIC Drive Controller CPU 1504D TF
• Siemens SIMATIC Drive Controller CPU 1507D TF
• CWE-1287

phpCAS vulnerable to Service Hostname Discovery Exploitation

• CWE-99
• CWE-1287

<1.6.0 · fixed in 1.6.0

Insufficient validation when decoding a Socket.IO packet

• SQL injection
• CWE-20

<3.3.3 || >=3.4.0, <3.4.2 || >=4.0.0, <4.0.5 || >=4.1.0, <4.2.1 · fixed in 3.3.3, 3.4.2, 4.0.5, 4.2.1

Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet

• Juniper Networks Junos OS
• CWE-1287

Privilege escalation from administrator in eLabFTW

• elabftw
• CWE-842
• CWE-1287

Insufficient type validation in pocketmine/pocketmine-mp

• CWE-20
• CWE-1287

<4.2.9 · fixed in 4.2.9

Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

• Cisco RoomOS Software
• CWE-1287

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

• Juniper Networks Junos OS
• Denial of service
• CWE-1287

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.

• BlackBerry QNX Software Development Platform (SDP)
• CWE-1287

Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

• etherpad-lite
• CWE-790
• CWE-1287

go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON

• CWE-20
• CWE-1287

<1.5.1 · fixed in 1.5.1