CWE-1035 (OWASP 2017年十大分类A9-使用含有已知漏洞的组件) — Vulnerability Class 13

This page aggregates vulnerability data specifically categorized under the weakness type CWE-1035, which describes issues related to insufficient validation of data before it is passed to a function. The collection encompasses security advisories and disclosed flaws from various software vendors and products that exhibit this specific coding defect, covering a historical time range from the initial identification of the weakness class to the most recent reported instances in the current year. Visitors can utilize this resource to track security advisories issued by specific vendors regarding this flaw, gain a deeper understanding of the technical characteristics and potential impacts of this weakness class, or look up the complete vulnerability history of a particular product to assess its long-term security posture. The data presented here is derived from public sources and is organized to facilitate efficient research and remediation planning for security professionals. By centralizing these records, the page enables analysts to identify patterns in how different implementations fail to handle this specific validation requirement, thereby supporting more effective defensive strategies. Users seeking to understand the scope of exposure or to verify the presence of this defect in their own software environments will find the structured information here essential for accurate risk assessment and prioritization of security patches.