Improper Handling of Parameters
CWE-233
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.
We track 12 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
Latest Improper Handling of Parameters vulnerabilities
- 8.8 High severity
GitLab: Improper Handling of Parameters
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions to
- 8.7 High severity
AMD Radeon™ RX 6000 Series Graphics Products: Improper Handling of Parameters
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
- 7.1 High severity
ThreadX: Improper Handling of Parameters
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
- 8.1 High severity
FortiWeb: Improper Handling of Parameters
A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker with non-public information pertai
- 7.8 High severity
Omaha: Improper Handling of Parameters
Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
- 8.8 High severity
ex200_firmware: Improper Handling of Parameters
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
- 9.8 Critical severity
epointwebbuilder: Improper Control of Generation of Code
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL.
- 7.5 High severity
HarmonyOS: Improper Handling of Parameters
The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality.
- 8.8 High severity
Cisco IOS: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters tha
- 7.5 High severity
ansible, ansible community.aws, ansible…: Improper Handling of Parameters
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading t
- 7.5 High severity
SINEMA Remote Connect Server: Improper Handling of Parameters
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application.
- 7.5 High severity
eharmony: Improper Handling of Parameters
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users