Skip to content
OpenAdvisories

Weakness (CWE)

CWE-233: Improper Handling of Parameters

Base Incomplete

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

Source: MITRE CWE-233

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.1
    CVE-2026-2370

    Improper Handling of Parameters in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions t…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 8.7
    CVE-2023-20514

    Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrar…

    AMD AMD Radeon™ PRO W6000 Series Graphics Products AMD Radeon™ RX 6000 Series Graphics Products AMD Radeon™ RX 7000 Series Graphics Products
  • High 7.2
    CVE-2025-55080

    Improper Parameter Check in ThreadX Syscall Implementation

    In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

    Eclipse Foundation ThreadX
  • High 7.7
    CVE-2025-52970 Public exploit EPSS 10%

    A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7,…

    Fortinet FortiWeb Network devices
  • High 7.3
    CVE-2023-7261 Public exploit

    Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform…

    Google Omaha
  • High 8.8
    CVE-2024-31808

    TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the web…

  • High 7.2
    CVE-2023-20076

    Cisco IOx Application Hosting Environment Command Injection Vulnerability

    A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters th…

    Cisco Cisco IOS iOS Network devices
  • High 7.5
    CVE-2022-3697

    Ansible leaks password to logs

    A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading …

    ansible ansible ansible ansible-core Debian Ubuntu PyPI
  • High 8.8
    CVE-2021-0269

    Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.

    The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions against a target device when a user is authenticated to J-Web. An attacker may be able to supersede exi…

    Juniper Networks Junos OS Network devices
  • High 8.6
    CVE-2021-1230

    Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability

    A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a deni…

    Cisco Cisco NX-OS System Software in ACI Mode Network devices