CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF...7.5 High
- cloudflare wranglerOS Command Injection in `wrangler pages deploy`7.7 High
- pithikos websocket serverAn input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to...7.5 High
- swift-otel swift-w3c-trace-contextSwift W3C TraceContext has malformed HTTP header that can cause a crash5.3 Medium
- hackucf onboardliteOnboardLite has stored Cross-site Scripting issue that may lead to admin Account Take Over7.3 High
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryCreated=` param9.3 Critical
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryDeleted=` param9.3 Critical
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryUpdated=` param9.3 Critical
- hotcrpHotCRP vulnerable to remote code execution through formulas10.0 Critical
- h2o quiclyQuicly has assertion failures7.5 High
- apache linkisApache Linkis: Arbitrary File Read via Double URL Encoding Bypass7.5 High
- saad iqbal quick contact formQuick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay5.8 Medium
- svelte devalue, red hat build of podman desktop - tech preview, trusted artifact signer 1.2 +1 more +3 moredevalue vulnerable to denial of service due to memory exhaustion in devalue.parse7.5 High
- tp-link systems inc. tl-wr841n v14, tp-link tl-wr841n firmware +1 moreNull Pointer Dereference Vulnerability on TL-WR841N6.3 Medium
- red hat build of keycloak, build of keycloak 26.4.9, jboss enterprise application platform 8 +1 more +3 moreOrg.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths3.7 Low
- linux, linux kernel +1 morewifi: mac80211: Discard Beacon frames to non-broadcast address7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevia_wdt: fix critical boot hang due to unnamed resource allocation5.5 Medium
- linux, linux kernel +1 moreusb: typec: ucsi: Handle incorrect num_connectors capability5.5 Medium
- huawei emui, harmonyos +1 morePermission verification bypass vulnerability in the media library module. Impact: Successful...6.1 Medium
- huawei harmonyosData verification vulnerability in the HiView module. Impact: Successful exploitation of this...6.2 Medium
- google chromeInappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59...5.4 Medium
- blurams dome flare firmwareAn insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera...6.8 Medium
- elastic kibanaImproper Input Validation in Kibana Email Connector Leading to Excessive Allocation6.5 Medium
- ethereum go-ethereum, go ethereum +1 morego-ethereum has a DoS via malicious p2p message7.1 High
- ethereum go-ethereum, go ethereum +1 morego-ethereum has a DoS via malicious p2p message7.1 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreImproper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)7.2 High
- adobe dreamweaver desktop, dreamweaver +1 moreDreamweaver Desktop | Improper Input Validation (CWE-20)8.6 High
- adobe dreamweaver desktop, dreamweaver +1 moreDreamweaver Desktop | Improper Input Validation (CWE-20)8.6 High
- adobe dreamweaver desktop, dreamweaver +1 moreDreamweaver Desktop | Improper Input Validation (CWE-20)8.6 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Server Update Service (WSUS) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreLDAP Tampering Vulnerability6.5 Medium
- netgear rbr750, rbr750 firmware, rbr840 +21 more +23 moreInsufficient input validation in NETGEAR Orbi routers4.8 Medium
- netgear xr1000v2, xr1000v2 firmware +1 moreInsufficient input validation in NETGEAR Nighthawk router XR1000v26.1 Medium
- netgear rbe970, rbe970 firmware, rbe971 +17 more +19 moreInsufficient input validation in NETGEAR Orbi routers1.1 Low
- linux, linux kernel +1 morenet: usb: asix: validate PHY address before use5.5 Medium
- linux, linux kernel +1 moretpm: Cap the number of PCR banks5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 High
- rustcrypto elliptic-curves, sm2 elliptic curve +1 moreRustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE7.5 High
- rustcrypto elliptic-curves, sm2 elliptic curve +1 moreRustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()7.5 High
- aws aws-sdk-netAWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value3.7 Low
- tp-link systems inc. archer axe75 v1.6, tp-link archer axe75 firmware +1 moreArbitrary File Deletion Vulnerability in TP-Link Archer AXE756.9 Medium
github.com/awslabs/aws-sdk-swiftSwiftURLAWS SDK for Swift adopted defense in depth enhancement for region parameter value3.7 Lowaws-sdknpmJavaScript SDK v2 users should add validation to the region parameter value in or migrate to v33.7 Low@smithy/config-resolvernpmAWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value3.7 Low- vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 morevLLM - Denial of Service via Unvalidated Multimodal Embeddings8.7 High
aws-sdk-accessanalyzercrates.io,aws-sdk-accountcrates.io,aws-sdk-acmcrates.io +197 more +199 moreAWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value3.7 Low- color iccdeviccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp8.8 High
- edubusinesssolutions print shop pro webdeskThere is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business...9.1 Critical
- color iccdeviccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp8.8 High
- Show moreLoading…