Skip to content
OpenAdvisories

Weakness (CWE)

CWE-229: Improper Handling of Values

Base Incomplete

The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

Source: MITRE CWE-229

10 results · Clear filters · Feed

  • High 8.4

    Local denial-of-service

    A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.

  • High 8.8

    Local and kernel denial-of-service

    A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.

  • High 7.5

    ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageS…

  • High 7.3

    Math Issue in No-Chicken/Echo-Mate

    Improper Handling of Values vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules). This vulnerability is associated with program files nf_tables.H‎, nft_byteorder.C‎, nft_meta.C‎. This issue affects Echo-Mat…

  • High 7.5

    Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols

    An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). If a value is configured for DDoS b…

  • High 7.5

    Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputt…

  • High 8.2

    Unauthenticated out of bounds stack write in bmcweb

    A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memo…

  • High 8.2

    Unauthenticated out of bounds heap write in bmcweb

    A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser ha…

  • High 7.5

    Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network …

  • High 7.5

    Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated …