CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- color iccdeviccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccTag:IsTypeCompressed()5.4 Medium
- color iccdeviccDEV has Type Confusion in CIccTagXmlTagData::ToXml()6.3 Medium
- color iccdeviccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp6.5 Medium
- color iccdeviccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdeviccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagLutAtoB::Validate()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagLut16::Read()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagSpectralViewingConditions()7.1 High
- color iccdeviccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile()8.8 High
- color iccdeviccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()8.8 High
- color iccdeviccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp7.1 High
- n8nn8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling10.0 Critical
- color iccdeviccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()8.8 High
- color iccdeviccDEV has heap-buffer-overflow vulnerability on IccTagXml()7.8 High
- color iccdeviccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service5.5 Medium
- color iccdeviccDEV has Undefined Behavior (UB) - Invalid Enum Value5.5 Medium
- color iccdeviccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray6.1 Medium
- color iccdevStack Overflow in iccDEV Calculator Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Tag Parser5.5 Medium
- color iccdevStack Overflow in iccDEV XML Calculator Macro Expansion5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Calculator Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV Signature Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV Unknown Tag Parser5.5 Medium
- color iccdevDivision by Zero in iccDEV TIFF Image Reader5.5 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 moreUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Critical
- openairinterface oai-cn5g-amfOpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests....7.5 High
- color iccdeviccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation6.1 Medium
- color iccdeviccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()8.8 High
- color iccdeviccDEV has Undefined Behavior in CIccCLUT::Init()8.8 High
- color iccdeviccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion9.8 Critical
- linuxfoundation spinnakerSpinnaker vulnerable to SSRF due to improper restrictions on http from user input7.9 High
github.com/open-feature/flagd/coreGo,github.com/open-feature/flagd/flagdGo,github.com/open-feature/flagd/flagd-proxyGo +2 moreflagd: Multiple Go Runtime CVEs Impact Security and AvailabilityNo score- milvus-io milvusmilvus HTTP Endpoint expr.go expr.Exec deserialization5.3 Medium
- samsung exynos 1330 firmware, exynos 1380 firmware, exynos 1480 firmware +3 more +5 moreAn issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos...7.1 High
- pluxmlPluXml Media Management medias.php __destruct deserialization5.1 Medium
- google android, devices +1 moreIn cpm_fwtp_msg_handler of cpm/google/lib/tracepoint/cpm_fwtp_ipc.c, there is a possible memory...7.8 High
- kromit titraTitra has Remote Code Execution in Admin Functionality9.1 Critical
- eyoucmsEyouCMS arcpagelist Ajax.php unserialize deserialization5.3 Medium
- aizuda snail-jobaizuda snail-job API FurySerializer.deserialize deserialization5.3 Medium
- delta electronics dvp-12se11t, deltaww dvp-12se11t firmware +1 moreDVP-12SE11T - Denial of Service Vulnerability7.5 High
- dromara sa-tokenDromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization2.3 Low
- qs project qsarrayLimit bypass in bracket notation allows DoS via memory exhaustion6.3 Medium
- olell uuruIn µURU, a Specially Crafted Federation Name Allows Dialplan Injection6.3 Medium
- gnu binutilsAn issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows...7.5 High
- gnu binutilsAn issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26...7.5 High
- dromara sa-tokenDromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization2.3 Low
- Show moreLoading…