CWE-229 · Input Validation and Logic
Improper Handling of Values
18CVEs
SortMost likely exploited
18 CVEs with CWE-229 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-24412Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leadi…Dell · PowerScale OneFS · CVSS 7.5 · 2022-04-12 | 7.5 | 1.0% | 2022-04-12 |
| CVE-2022-22562Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-se…Dell · PowerScale OneFS · CVSS 7.5 · 2022-04-12 | 7.5 | 0.9% | 2022-04-12 |
| CVE-2022-4851Improper Handling of Values in usememos/memosusememos · usememos/memos · CVSS 9.8 · 2022-12-29 | 9.8 | 0.8% | 2022-12-29 |
| CVE-2022-2809Unauthenticated out of bounds heap write in bmcwebOpenBMC Project · OpenBMC · CVSS 8.2 · 2022-10-27 | 8.2 | 0.8% | 2022-10-27 |
| CVE-2025-20268Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2025-08-14 | 5.8 | 0.5% | 2025-08-14 |
| CVE-2024-36737Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.Oneflow · Oneflow · CVSS 7.5 · 2024-06-06 | 7.5 | 0.5% | 2024-06-06 |
| CVE-2026-59565Local and kernel denial-of-serviceZscaler · Client Connector · CVSS 8.8 · 2026-08-24 | 8.8 | 0.5% | 2026-08-24 |
| CVE-2024-39531Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocolsJuniper Networks · Junos OS Evolved · CVSS 7.5 · 2024-07-11 | 7.5 | 0.4% | 2024-07-11 |
| CVE-2024-20431A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access cont…Cisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2024-10-23 | 5.8 | 0.4% | 2024-10-23 |
| CVE-2025-7964Zigbee Router Denial of Servicesilabs.com · Silicon Labs Zigbee Stack · CVSS 9.2 · 2026-01-30 | 9.2 | 0.3% | 2026-01-30 |
| CVE-2024-0607Kernel: nf_tables: pointer math issue in nft_byteorder_eval()Redhat · kernel · CVSS 6.6 · 2024-01-18 | 6.6 | 0.3% | 2024-01-18 |
| CVE-2024-29460An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp componen…Dronecode · Px4 Drone Autopilot · CVSS 6.6 · 2024-04-10 | 6.6 | 0.2% | 2024-04-10 |
| CVE-2024-30917An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_…Eprosima · Fast Dds · CVSS 5.5 · 2024-04-11 | 5.5 | 0.2% | 2024-04-11 |
| CVE-2024-30800PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.Dronecode · Px4 Drone Autopilot · CVSS 5.6 · 2024-04-23 | 5.6 | 0.2% | 2024-04-23 |
| CVE-2026-59566Local denial-of-serviceZscaler · Client Connector · CVSS 8.4 · 2026-08-24 | 8.4 | 0.2% | 2026-08-24 |
| CVE-2025-31648Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user co…Intel(R) Processor Family may allow an escalation of privilege. Startup code an… · CVSS 3.9 · 2026-02-10 | 3.9 | 0.1% | 2026-02-10 |
| CVE-2025-35973Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a priv…Intel(R) Processors · CVSS 4.5 · 2026-08-11 | 4.5 | 0.1% | 2026-08-11 |
| CVE-2026-4736Math Issue in No-Chicken/Echo-MateNo-Chicken · Echo-Mate · CVSS 7.3 · 2026-03-24 | 7.3 | 0.1% | 2026-03-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.