目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CWE-1287 类漏洞列表 126

CWE-1287 类弱点 126 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-1287 属于输入验证缺陷，指程序未正确校验输入数据的预期类型。攻击者常通过构造类型不符的恶意数据，触发意外错误或诱导程序执行非预期操作，进而利用潜在漏洞。开发者应实施严格的类型检查机制，确保输入数据符合预期格式与类型，并在处理前进行标准化清洗，从而阻断利用路径，提升系统安全性。

MITRE CWE 官方描述
CWE：CWE-1287 对指定类型的输入验证不当 英文：产品接收预期为特定类型的输入，但未验证或错误地验证该输入是否实际符合预期类型。 当输入不符合预期类型时，攻击者可能触发意外错误、导致执行错误的操作，或利用那些在输入符合预期类型时无法利用的潜在漏洞。这种弱点可能出现在类型不安全（type-unsafe）的编程语言中，也可能出现在支持将输入强制转换（casting）或转换为其他类型的编程语言中。
常见影响 (1)
OtherVaries by Context
缓解措施 (1)
ImplementationAssume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
Effectiveness: High
CVE IDタイトルCVSS深刻度公開日
CVE-2022-43723 Siemens SICAM PAS/PQS 输入验证错误漏洞 — SICAM PAS/PQS 7.5 -2022-12-13
CVE-2022-22228 Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet — Junos OS 7.5 High2022-10-18
CVE-2022-20783 Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability — Cisco RoomOS Software 7.5 High2022-04-21
CVE-2022-22168 Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot — Junos OS 6.5 Medium2022-01-19
CVE-2021-32024 BlackBerry QNX SDP 安全漏洞 — QNX Software Development Platform (SDP) 8.1 High2021-12-13
CVE-2021-20329 Specific cstrings input may not be properly validated in the Go Driver — MongoDB Go Driver 6.8 Medium2021-06-10

CWE-1287 是常见的弱点类别，本平台收录该类弱点关联的 126 条 CVE 漏洞。