Fallos del tipo CWE-1284

387 resultados

Validação inadequada de quantidade especificada em entrada

Ocorre quando a aplicação aceita um parâmetro que define uma quantidade (tamanho de buffer, número de iterações, limite de registros) sem validar se esse valor está dentro de limites seguros. Um atacante pode especificar quantidades excessivas, causando consumo de recursos, overflow de memória ou lógica comprometida.

Ejemplo

Um endpoint REST recebe `?limit=999999999` para pagination sem checar se o valor é razoável, causando alocação massiva de memória ou timeout. Ou um parser aceita `Content-Length: -1` sem validar valores negativos, causando comportamento indefinido.

Cómo mitigar

Sempre validar limites mínimos e máximos de qualquer quantidade recebida do usuário antes de usar em alocação de memória, loops ou operações de I/O. Defina ranges explícitos (ex: `1 ≤ limit ≤ 1000`) e rejeite valores fora desse intervalo.

CVE-2026-33349MEDIUMfast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy EvaluationEPSS 0.5%CVE-2026-25345CRITICALWordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerabilityEPSS 0.5%CVE-2026-87470CRITICALImproper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbiEPSS 0.5%CVE-2026-102183HIGHJunos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashesEPSS 0.5%CVE-2026-102016HIGHJunos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabledEPSS 0.5%CVE-2026-59531HIGHWordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerabilityEPSS 0.5%CVE-2026-102184HIGHJunos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crashEPSS 0.5%CVE-2026-102065HIGHJunos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabledEPSS 0.5%CVE-2026-57023HIGHJunos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crashEPSS 0.5%CVE-2026-16025HIGHImproper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS ModuleEPSS 0.5%CVE-2026-59252HIGHMissing gas_limit validation in mpp Tempo fee-payer enables wallet drainEPSS 0.5%CVE-2026-93749HIGHsource-map-js through 1.2.1 Event Loop Denial of ServiceEPSS 0.5%CVE-2025-11594MEDIUMywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in inputEPSS 0.5%CVE-2022-25727CRITICALMemory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnaEPSS 0.5%CVE-2026-12974HIGHSecurity Policy Bypass in Forcepoint Security Engine (NGFW)EPSS 0.5%CVE-2025-36092MEDIUMIBM Business Automation Insights improper input validationEPSS 0.5%CVE-2025-10259MEDIUMDenial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU moduleEPSS 0.5%CVE-2026-116581HIGHSeroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)EPSS 0.5%CVE-2026-25863HIGHConditional Fields for Contact Form 7 < 2.7.3 DoS via Uncontrolled Resource ConsumptionEPSS 0.5%CVE-2026-12059HIGHCellopoint｜CelloOS - Improper Access ControlEPSS 0.4%