CWE-231 Improper Handling of Extra Values

variant

The product does not handle or incorrectly handles when more values are provided than expected.

01

übergeordnete Schwächen

Übergeordnete Klassen, zu denen dies gehört.

02

Schwachstellen (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-22888UShigh7.5—
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
CVE-2023-44386USmedium5.3—
Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler closed connections w…
CVE-2024-20268US——
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-6841US——
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resourc…
CVE-2024-31397US——
Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative pr…
03

Quelle

Wo diese Definition veröffentlicht ist.

scry

Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan