cve.bz

CWE-1286: Improper Validation of Syntactic Correctness of Input, page 3

Filter

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

What the weakness is: CWE-1286 at MITRE

Ask an AI about CWE-1286

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-1286: Improper Validation of Syntactic Correctness of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1286.html and https://cve.bz/cve/cwe/1286?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2022-22192EPSS 0.8%

    An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an incoming T…

  2. 7.5CVE-2022-1941EPSS 1.5%

    A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, …

  3. 6.5CVE-2022-22176EPSS 0.4%

    An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet to cause a crash of jdhcpd …

  4. 8.8CVE-2021-31988EPSS 1.0%

    A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.

  5. 7.5CVE-2021-31987EPSS 0.9%

    A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.

  6. 8.8CVE-2021-28812EPSS 1.6%

    A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station ve…

  7. 4.3CVE-2020-16220EPSS 0.3%

    In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to comply with a certain syntax) but it does not validate or …