CWE-1284 类弱点 250 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1284属于输入验证缺陷，指程序未正确校验输入中指定的数量属性。攻击者常通过提交异常数值（如极大长度或频率）触发资源耗尽、计算错误或逻辑越界，导致服务拒绝或系统崩溃。开发者应实施严格的边界检查，确保输入数量符合预期范围，并在分配资源或控制循环前进行有效性验证，从而防止因非法数量引发的安全风险。
... public static final double price = 20.00; int quantity = currentUser.getAttribute("quantity"); double total = price * quantity; chargeUser(total); ...... #define MAX_DIM 100 ... /* board dimensions */ int m,n, error; board_square_t *board; printf("Please specify the board height: \n"); error = scanf("%d", &m); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } printf("Please specify the board width: \n"); error = scanf("%d", &n); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } if ( m > MAX_DIM || n > MAX_DIM ) { die("Value too large: Die evil hacker!\n"); } board = (board_square_t*) malloc( m * n * sizeof(board_square_t)); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-5808 | OpenText Self Service Password Reset 安全漏洞 — Self Service Password Reset | 9.8 | - | 2025-08-29 |
| CVE-2025-8424 | Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞 — ADC | 8.8AI | High AI | 2025-08-26 |
| CVE-2025-8320 | Tesla Wall Connector 安全漏洞 — Wall Connector | 8.8AI | High AI | 2025-07-30 |
| CVE-2025-43881 | SYNCK GRAPHICA Real-time Bus Tracking System 安全漏洞 — Real-time Bus Tracking System | 4.9 | - | 2025-07-23 |
| CVE-2025-41100 | ParkingDoor 安全漏洞 — ParkingDoor | 8.4 | - | 2025-07-21 |
| CVE-2025-4365 | Citrix NetScaler Console和Citrix NetScaler SDX 安全漏洞 — Console | 6.2AI | Medium AI | 2025-06-17 |
| CVE-2025-5349 | Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞 — ADC | 8.1AI | High AI | 2025-06-17 |
| CVE-2025-49292 | WordPress plugin Profile Builder 安全漏洞 — Profile Builder | 4.3 | Medium | 2025-06-06 |
| CVE-2025-5257 | Mautic 安全漏洞 — Mautic | 6.5 | Medium | 2025-05-28 |
| CVE-2025-2826 | Arista EOS 安全漏洞 — EOS | 2.6 | Low | 2025-05-27 |
| CVE-2024-9448 | Arista EOS 安全漏洞 — EOS | 7.5 | High | 2025-05-08 |
| CVE-2025-46656 | python-markdownify 安全漏洞 — python-markdownify | 2.9 | Low | 2025-04-26 |
| CVE-2025-3511 | Mitsubishi Electric多款产品 安全漏洞 — CC-Link IE TSN Remote I/O module NZ2GN2S1-32D | 7.5 | High | 2025-04-25 |
| CVE-2025-43970 | GoBGP 安全漏洞 — GoBGP | 4.3 | Medium | 2025-04-21 |
| CVE-2025-43972 | GoBGP 安全漏洞 — GoBGP | 6.8 | Medium | 2025-04-21 |
| CVE-2025-43964 | Libraw 安全漏洞 — LibRaw | 2.9 | Low | 2025-04-20 |
| CVE-2025-32415 | libxml2 安全漏洞 — libxml2 | 2.9 | Low | 2025-04-17 |
| CVE-2025-25178 | Imagination GPU Driver 安全漏洞 — Graphics DDK | 7.8AI | High AI | 2025-04-04 |
| CVE-2024-45351 | Xiaomi Game center 安全漏洞 — Game center application | 7.8 | High | 2025-03-26 |
| CVE-2024-8000 | Arista EOS 安全漏洞 — EOS | 5.3 | Medium | 2025-03-04 |
| CVE-2024-53879 | NVIDIA CUDA toolkit 安全漏洞 — CUDA Toolkit | 2.8 | Low | 2025-02-25 |
| CVE-2024-53878 | NVIDIA CUDA toolkit 安全漏洞 — CUDA Toolkit | 2.8 | Low | 2025-02-25 |
| CVE-2023-20508 | AMD Graphics Driver 安全漏洞 — AMD Radeon™ RX 6000 Series Graphics Products | 5.0 | Medium | 2025-02-11 |
| CVE-2023-31331 | AMD Client Processor 安全漏洞 — AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | 3.0 | Low | 2025-02-11 |
| CVE-2023-20582 | AMD Server Processor 安全漏洞 — AMD EPYC™ 9004 Processors | 5.3 | Medium | 2025-02-11 |
| CVE-2023-20581 | AMD Server Processor 安全漏洞 — AMD EPYC™ 9004 Processors | 2.5 | Low | 2025-02-11 |
| CVE-2023-20515 | AMD Client Processor 安全漏洞 — AMD Ryzen™ 3000 Series Desktop Processors | 5.7 | Medium | 2025-02-11 |
| CVE-2024-20149 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 | 7.5 | - | 2025-01-06 |
| CVE-2024-52901 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 6.5 | Medium | 2024-12-12 |
| CVE-2024-47257 | AXIS OS 安全漏洞 — AXIS Q6128-E PTZ Network Camera | 7.5 | High | 2024-11-26 |
CWE-1284 是常见的弱点类别，本平台收录该类弱点关联的 250 条 CVE 漏洞。