VulnSea

CWE-1284

CVEs classified under CWE-1284, newest first.

161 CVEsRSS

CVE-2025-12385None
11mo ago

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. T…

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. T…

▾ SunlitEPSS 0.34%via NVD
CVE-2025-61938High· 7.5
1y ago

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process …

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process …

▾ Twilightf5 · big-ip_advanced_web_application_firewallEPSS 0.35%via NVD
CVE-2025-11568Medium· 4.4
1y ago

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an enc…

▾ SunlitLatchset · luksmetaEPSS 0.10%via NVD
CVE-2025-58835Medium· 5.3
1y ago

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <= 7.6.6.

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <= 7.6.6.

▾ SunlitEPSS 0.29%via NVD
CVE-2025-38110High· 7.8
1y ago

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface…

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface…

▾ Twilightlinux · linux_kernelEPSS 0.20%via NVD
CVE-2025-3511High· 7.5
1y ago

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link…

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link…

▾ TwilightEPSS 0.93%via NVD
CVE-2024-38659High· 7.3
2y ago

In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_vf_port enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MAX and that the …

In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_vf_port enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MAX and that the …

▾ Twilightlinux · linux_kernelEPSS 0.24%via NVD
CVE-2024-35965High· 7.1
2y ago

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before copying data.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before copying data.

▾ Twilightlinux · linux_kernelEPSS 0.24%via NVD
CVE-2024-35937High· 8.1
2y ago

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data…

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data…

▾ Twilightdebian · debian_linuxEPSS 0.34%via NVD
CVE-2022-2845High· 7.8⚖ disputed
4y ago

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

▾ Twilightvim · vimEPSS 0.53%via NVD
CVE-2022-23635High· 7.5
4y ago

Istio is an open platform to connect, manage, and secure microservices

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted mes…

▾ Twilightistio · istioEPSS 1.7%via NVD
CWE-1284 vulnerabilities (CVEs) — page 6 · VulnSea