Improper Validation of Specified Quantity in Input
CWE-1284
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
We track 203 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0. 2 have been exploited in real attacks.
Latest Improper Validation of Specified Quantity in Input vulnerabilities
- 9.8 Critical severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 8.6 High severity
pipenv: Integer Overflow or Wraparound
pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirement
- 7.8 High severity
Linux Kernel Improper Input Validation Exploited
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via cr