Improper Handling of Syntactically Invalid Structure
CWE-228
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
We track 9 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.3.
Latest Improper Handling of Syntactically Invalid Structure vulnerabilities
- 10.0 Critical severity
mistral-vibe: Improper Handling of Syntactically Invalid Structure
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the us
- 7.5 High severity
Pro Cloud Server: Improper Handling of Syntactically Invalid Structure
Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query. This causes the Pro Cloud Server service to terminate unexpectedly. The vendor was no
- 7.5 High severity
firebird: Improper Handling of Syntactically Invalid Structure
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_arg_cstring type when decoding an op_response packet, causing a server crash when one is en
- 7.7 High severity
IOS: Improper Handling of Syntactically Invalid Structure
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulne
- 9.8 Critical severity
FortiWeb: Improper Handling of Syntactically Invalid Structure
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.
- 9.8 Critical severity
FortiWeb: Improper Handling of Syntactically Invalid Structure
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.
- 7.5 High severity
Swift ASN1: Improper Handling of Syntactically Invalid Structure
Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a
- 7.5 High severity
MongoDB Rust Driver: Improper Handling of Syntactically Invalid Structure
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.
- 7.5 High severity
Junos OS Evolved: Improper Handling of Syntactically Invalid Structure
An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On all Junos OS Evolved p