CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- hanwha vision co., ltd. qnv-c8012, hanwhavision knb-2000 firmware, knb-5000n firmware +254 more +256 moreImproper Input Validation5.8 Medium
- hanwha vision co., ltd. qnv-c8012, hanwhavision knb-2000 firmware, knb-5000n firmware +254 more +256 moreImproper Input Validation5.2 Medium
- megasys computer technologies telenium online web applicationMegaSys Computer Technologies Telenium Online Web Application Improper Input Validation9.3 Critical
- continuwuityConduit-derived homeservers are affected by a Confused Deputy and Improper Input Validation issue9.9 Critical
- eaton xcomfort eci, xcomfort ethernet communication interface +1 moreImproper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could...8.8 High
- delta electronics dvp15mc11t, deltaww dvp15mc11t firmware +1 moreModbus/TCP Dos Vulnerability in DVP15MC11T4.0 Medium
- mediawikiAction API xslt option allows JavaScript execution by administrators who are not interface administrators0.0 None
- mediawikilist=allrevisions can be used to bypass Extension:Lockdown0.0 None
- weblateWeblate has git config file overwrite vulnerability that leads to remote code execution9.1 Critical
- simplemachines simple machines forumA stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows...6.1 Medium
- free5gcAn issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a...7.5 High
- homarrHomarr: missing input sanitization and possible privilege escalation through ldap search query injection7.5 High
- apple ipados, macos, tvos +4 more +6 moreMultiple memory corruption issues were addressed with improved input validation. This issue is...5.7 Medium
- cisco asyncos, secure email, secure email and web manager +1 more +3 moreCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability10.0 Critical
- ritecmsA reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to...6.1 Medium
- opensourcepos open source point of saleA Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of...7.2 High
- opensourcepos open source point of saleA Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point...7.2 High
- better-authBetter Auth before 1.4.5 Path Normalization Bypass via rou38.8 High
- volosoft abpABP Account Module has an Open Redirect through Improper validation in its register function5.3 Medium
- freshrssFreshRSS vulnerable to authenticated RCE via path traversal inside include()7.4 High
- ays-pro fox lms – wordpress lms pluginFox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'9.8 Critical
- tiny-rdm tiny rdmtiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization2.3 Low
- templateinvaders ti woocommerce wishlistTI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection5.3 Medium
- apple macosThe issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.8...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreA mail header parsing issue was addressed with improved checks. This issue is fixed in watchOS 26...7.5 High
- apple macosA denial-of-service issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- danny-avila librechatLibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes5.3 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-ConfigMgrConsoleExtensions Instructions6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-PauseNomadJobQueue Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-PatchInsights-Deploy Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-LogoffUser Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-FindFileBySizeAndHash Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-GetCmContentLocations Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-CheckSimpleIoC Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreUnauthenticated Transmission of Data in NomadBranch.exe4.3 Medium
- teamviewer dex, digital employee experience +1 moreFile Hash Validation Bypass in NomadBranch.exe8.8 High
- teamviewer dex, digital employee experience +1 moreDenial-of-Service Vulnerability in NomadBranch.exe6.5 Medium
- hashenudara edoc-doctor-appointment-systemedoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add...8.8 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)8.4 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)9.1 Critical
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.8 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- netgear mr90, ms90, rax35v2 +32 more +34 moreImproper input validation in NETGEAR Nighthawk routers4.4 Medium
- netgear r7000p, r7000p firmware +1 moreImproper input validation in NETGEAR Nighthawk router R7000P1.1 Low
- tianocore edk2Un-verified kernel bypass Secure Boot mechanism in direct boot mode8.4 High
- siemens ruggedcom rmc8388 v5.x, ruggedcom rs416pv2 v5.x, ruggedcom rs416v2 v5.x +18 more +20 moreA vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM...5.3 Medium
- siemens sinec security monitorA vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The...7.1 High
- Show moreLoading…