CWE-1287.

Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability

• Cisco RoomOS Software
• Cisco TelePresence Endpoint Software (TC/CE)
• CWE-1287

M365 Copilot Information Disclosure Vulnerability

• Microsoft 365 Copilot
• CWE-1287

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…

• Oracle Corporation Oracle Java SE
• Oracle Corporation Oracle GraalVM for JDK
• CWE-1287

Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls

• CWE-1287

<1.11.0 · fixed in 1.11.0

Meshtastic firmware allows forged DMs with no PKC to show up as encrypted

• meshtastic firmware
• CWE-1287

Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost

• CWE-1287

>=11.0.0-alpha.1+incompatible, <11.1.0+incompatible · fixed in 11.1.0+incompatible

Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi

• CWE-1287

<1.2.2 · fixed in 1.2.2

JBL: Improper validation of ICM field in connection requests

• JBL Flip 5
• JBL Flip 6
• CWE-1287

In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.

• KDEConnect
• CWE-1287

In Modem, there is a possible system crash due to a logic error.

• MediaTek, Inc. MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
• CWE-1287

CVE-2025-12977

• FluentBit Fluent Bit
• CWE-1287

DoS via Modbus Read Command

• Janitza UMG 96-PA
• Janitza UMG 96-PA-MID+
• CWE-1287

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability.

• Axis Communications AB AXIS OS
• CWE-1287

Incorrect permission assignment in Axis Communications AB AXIS OS

• Axis Communications AB AXIS OS
• Broken access control
• CWE-1287

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation.

• Axis Communications AB AXIS OS
• CWE-1287

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.

• Axis Communications AB AXIS OS
• CWE-1287

Windows Authentication Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1287

Windows Authentication Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• Memory corruption
• CWE-1287

Windows Local Session Manager (LSM) Denial of Service Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1287

Windows Authentication Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1287

Windows Local Session Manager (LSM) Denial of Service Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1287

Windows Local Session Manager (LSM) Denial of Service Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• CWE-1287

Windows Authentication Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1287

Mattermost Desktop App crashes when clicking on malformed external URL

• Mattermost
• CWE-1287

Synapse's invalid device keys degrade federation functionality

• CWE-1287

<1.138.3 || >=1.139.0rc2, <1.139.1 · fixed in 1.138.3, 1.139.1

Cisco IOS: A vulnerability in the web UI of Cisco IOS Software could allow an authenticated…

• Cisco IOS
• CWE-1287

Authenticated File Disclosure/Delete

• ABB FLXEON
• CWE-1287

Remote Code Execution

• ABB FLXEON
• CWE-1287

Missing input validation vulnerability in SAP Landscape Transformation Replication Server

• SAP_SE SAP Landscape Transformation Replication Server
• CWE-1287

Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

• SAP_SE SAP S/4HANA (Private Cloud or On-Premise)
• CWE-1287

Mattermost has Potential Server Crash due to Unvalidated Import Data in github.com/mattermost/mattermost-server

• Memory corruption
• CWE-1287

>=9.11.0+incompatible, <9.11.18+incompatible || >=10.5.0+incompatible, <10.5.9+incompatible || >=10.8.0+incompatible, <10.8.4+incompatible || >=10.9.0+incompatible, <10.9.4+incompatible || >=10.10.0+incompatible, <10.10.1+incompatible · fixed in 9.11.18+incompatible, 10.5.9+incompatible, 10.8.4+incompatible, 10.9.4+incompatible, 10.10.1+incompatible

Mattermost Confluence Plugin has Improper Validation of Specified Type of Input in github.com/mattermost/mattermost-plugin-confluence

• CWE-1287

<1.5.0 · fixed in 1.5.0

Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-1287

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-1287

Rockwell Automation FLEX 5000 I/O - Module Fault

• Rockwell Automation FLEX 5000 I/O
• CWE-1287

Rockwell Automation FLEX 5000 I/O - Module Fault

• Rockwell Automation FLEX 5000 I/O
• CWE-1287

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.

• Axis Communications AB AXIS OS
• CWE-1287

IBM SmartCloud Analytics - Log Analysis denial of service

• IBM SmartCloud Analytics Log Analysis
• CWE-1287

Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check

• CWE-20
• CWE-1287

<444.vca · fixed in 444.vca

SOAP message input validation fault could in theory cause OAM service resource exhaustion

• Nokia Single RAN
• CWE-1287

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

• CWE-1287

Meshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted

• Meshtastic-Android
• CWE-1287

CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

• Weak cryptography or TLS
• CWE-20

<1.6.1 · fixed in 1.6.1

IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation

• IBM QRadar Suite Software
• IBM Cloud Pak for Security
• CWE-1287

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of t…

• Axis Communications AB AXIS OS
• CWE-628
• CWE-1287

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on…

• RRWO Net::CIDR::Set
• CWE-1287

Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches

• Weidmueller IE-SW-VL05M-5TX
• Weidmueller IE-SW-VL05MT-5TX
• CWE-1287

Cisco IOS XE Software: A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an…

• Cisco IOS XE Software
• CWE-1287

Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements

• CWE-1287

<1.13.5 || >=1.14.0-alpha.1, <1.14.0 · fixed in 1.13.5, 1.14.0

Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type

• CWE-1287

<1.41.0 || >=2.0.0 · fixed in 1.41.0

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

• HCL Software HCL BigFix Platform
• CWE-1287

Axis Communications AB AXIS OS: 51l3nc3, a member of the AXIS OS Bug Bounty Program…

• Axis Communications AB AXIS OS
• CWE-1287

Improper input validation in Google Chrome

• Google Chrome
• CWE-20
• CWE-1287

Denial of Service Via Malicious GIF

• Mattermost
• CWE-1287

Axis Communications AB AXIS OS: Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program…

• Axis Communications AB AXIS OS
• CWE-1287

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

• CWE-704
• CWE-1287

>=7.12.0, <7.12.1 · fixed in 7.12.1

In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file endpoint.

• HTTP request smuggling
• CWE-1287

Avaya Spaces HTML injection (HTMLi) Vulnerability

• Avaya Spaces
• CWE-1287

Authentication bypass in @sap/approuter

• Open redirect
• CWE-302

>=2.6.1, <16.7.2 · fixed in 16.7.2

Possible DoS by memory exhaustion in net-imap

• Denial of service
• CWE-405

>=0.3.2, <0.3.8 || >=0.4.0, <0.4.19 || >=0.5.0, <0.5.6 · fixed in 0.3.8, 0.4.19, 0.5.6