Weakness (CWE)
CWE-237: Improper Handling of Structural Elements
The product does not handle or incorrectly handles inputs that are related to complex structures.
Source: MITRE CWE-237
6 results · Feed
-
Medium 4.3
Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host p…
-
Critical 9.8
vm2: Sandbox Breakout Using Async Generator
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the return function, the value is awaited on and exceptions throw…
-
Low 3.3
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may …
-
Medium 5.5
Openstack: deleting a non existing access rule deletes another existing access rule in it's scope
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.
-
High 7.5
Weintek Weincloud Improper Handling of Structural Elements
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
-
High 7.4
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be ex…