Weakness (CWE)
CWE-794: Incomplete Filtering of Multiple Instances of Special Elements
The product receives data from an upstream component, but it does not filter all instances of a special element before sending it to a downstream component.
More detail
Incomplete filtering of this nature may be applied to:
- sequential elements (special elements that appear next to each other) or
- non-sequential elements (special elements that appear multiple times in different locations).
Source: MITRE CWE-794
5 results · Feed
-
Critical 9.3
OWASP CRS has multipart bypass using multiple content-type parts
The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the …
-
High 7.5
Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.
A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board (FFEB) crash. Continued recei…
-
High 8.6
Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffi…
-
Medium 5.3
Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.
On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while…
-
Medium 5.8
Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry …