CWE-1284 类弱点 211 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1284属于输入验证缺陷，指程序未正确校验输入中指定的数量属性。攻击者常通过提交异常数值（如极大长度或频率）触发资源耗尽、计算错误或逻辑越界，导致服务拒绝或系统崩溃。开发者应实施严格的边界检查，确保输入数量符合预期范围，并在分配资源或控制循环前进行有效性验证，从而防止因非法数量引发的安全风险。
... public static final double price = 20.00; int quantity = currentUser.getAttribute("quantity"); double total = price * quantity; chargeUser(total); ...... #define MAX_DIM 100 ... /* board dimensions */ int m,n, error; board_square_t *board; printf("Please specify the board height: \n"); error = scanf("%d", &m); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } printf("Please specify the board width: \n"); error = scanf("%d", &n); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } if ( m > MAX_DIM || n > MAX_DIM ) { die("Value too large: Die evil hacker!\n"); } board = (board_square_t*) malloc( m * n * sizeof(board_square_t)); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-5102 | Avast Antivirus 安全漏洞 — Antivirus | 7.8 | - | 2024-06-10 |
| CVE-2024-24715 | WordPress plugin BookIt 安全漏洞 — BookIt | 6.5 | Medium | 2024-05-17 |
| CVE-2024-30527 | WordPress plugin WP Express Checkout 安全漏洞 — WP Express Checkout (Accept PayPal Payments) | 7.5 | High | 2024-05-17 |
| CVE-2024-3317 | SailPoint Identity Security Cloud 安全漏洞 — Identity Security Cloud | 6.5 | Medium | 2024-05-15 |
| CVE-2024-3185 | Rapid7 Insight Agent 安全漏洞 — Insight Agent | 6.8 | Medium | 2024-04-23 |
| CVE-2024-23593 | Microsoft Windows Secure Boot 安全漏洞 — Windows 7 and 8 PC Preloads | 6.7 | Medium | 2024-04-15 |
| CVE-2024-24690 | Zoom Client 安全漏洞 — Zoom Clients | 5.4 | Medium | 2024-02-14 |
| CVE-2023-4518 | Hitachi Energy SAM600 安全漏洞 — Relion670 | 6.5 | Medium | 2023-12-01 |
| CVE-2023-23549 | Checkmk 安全漏洞 — Checkmk | 2.7 | Low | 2023-11-15 |
| CVE-2023-36839 | Juniper Networks Junos OS和Junos OS Evolved 安全漏洞 — Junos OS | 6.5 | Medium | 2023-10-12 |
| CVE-2023-4439 | Card Holder Management System 安全漏洞 — Card Holder Management System | 4.3 | Medium | 2023-08-20 |
| CVE-2023-0195 | NVIDIA GPU Display Driver 安全漏洞 — vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) | 2.0 | Low | 2023-04-01 |
| CVE-2023-0194 | 多款NVIDIA产品 安全漏洞 — vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) | 2.0 | Low | 2023-04-01 |
| CVE-2022-4171 | WordPress plugin demon image annotation 安全漏洞 — demon image annotation | 6.5 | Medium | 2022-12-13 |
| CVE-2021-44693 | Siemens SIMATIC Drive Controller 安全漏洞 — SIMATIC Drive Controller CPU 1504D TF | 4.9 | Medium | 2022-12-13 |
| CVE-2022-46143 | Siemens部分产品 安全漏洞 — RUGGEDCOM RM1224 LTE(4G) EU | 2.7 | Low | 2022-12-13 |
| CVE-2022-4111 | ToolJet 资源管理错误漏洞 — tooljet/tooljet | 6.5 | Medium | 2022-11-22 |
| CVE-2022-39313 | Parse Server 输入验证错误漏洞 — parse-server | 7.5 | High | 2022-10-24 |
| CVE-2022-39272 | Flux2 输入验证错误漏洞 — flux2 | 5.0 | Medium | 2022-10-21 |
| CVE-2022-2277 | Hitachi Energy MicroSCADA X SYS600 输入验证错误漏洞 — MicroSCADA X SYS600 | 7.5 | High | 2022-09-14 |
| CVE-2022-28199 | DPDK 输入验证错误漏洞 — NVIDIA FLARE | 6.5 | Medium | 2022-09-01 |
| CVE-2022-2845 | Vim 安全漏洞 — vim/vim | 7.8 | High | 2022-08-17 |
| CVE-2022-28613 | Hitachi Energy RTU500 输入验证错误漏洞 — RTU500 series CMU Firmware | 7.5 | High | 2022-05-02 |
| CVE-2022-0596 | Microweber 安全漏洞 — microweber/microweber | 2.7 | - | 2022-02-15 |
| CVE-2022-0414 | dolibarr 安全漏洞 — dolibarr/dolibarr | 4.3 | - | 2022-01-31 |
| CVE-2022-22166 | Juniper Networks Junos OS 输入验证错误漏洞 — Junos OS | 6.5 | Medium | 2022-01-19 |
| CVE-2022-0174 | Dolibarr 输入验证错误漏洞 — dolibarr/dolibarr | 4.3 | Medium | 2022-01-10 |
| CVE-2021-31346 | Siemens Nucleus 安全漏洞 — Capital Embedded AR Classic 431-422 | 8.2 | High | 2021-11-09 |
| CVE-2021-31345 | Siemens Nucleus 安全漏洞 — Capital Embedded AR Classic 431-422 | 7.5 | High | 2021-11-09 |
| CVE-2020-27217 | Eclipse Hono 安全漏洞 — Eclipse Hono | 6.5 | - | 2020-11-13 |
CWE-1284 是常见的弱点类别，本平台收录该类弱点关联的 211 条 CVE 漏洞。