CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
hpke-rscrates.io,hpke-rs-rust-cryptocrates.io +1 moreBug fixes in hpke-rs, hpke-rs-rust-crypto8.2 High- kubernetes ingress-nginxingress-nginx auth-method nginx configuration injection8.8 High
- kubernetes ingress-nginxingress-nginx auth-method nginx configuration injection8.8 High
- facturascriptsFacturaScripts has SQL Injection vulnerability in Autocomplete Actions8.7 High
- facturascriptsFacturaScripts has SQL Injection vulnerability in API ORDER BY Clause8.3 High
- tp-link systems inc. archer be230 v1.2, tp-link archer be230 firmware +1 moreImproper Input Validation Leading to DoS on TP-Link Archer BE2306.8 Medium
- asustor adm, data master +1 moreAn improper input validation vulnerability was found in ADM while joining a AD Domain.9.5 Critical
- wikimedia foundation discussiontoolsAction API discussiontoolspageinfo does not check for authorizeRead for the page2.7 Low
- parall jspdfjsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder8.7 High
- parall jspdfjsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)6.9 Medium
- adlered bolo-solobolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization5.3 Medium
- naturalintelligence fast-xml-parserfast-xml-parser has RangeError DoS Numeric Entities Bug7.5 High
- red hat build of apicurio registry 2, build of quarkus, data grid 8 +7 more +9 moreUndertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks7.5 High
- polarlearnPolarLearn's unvalidated vote direction allows vote count manipulation7.1 High
- pwncollege dojopwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution8.3 High
- tp-link systems inc. archer re605x, tp-link archer re605x firmware +1 moreInsufficient Backup File Upload Input Validation on TP-Link Archer RE605X7.3 High
- teamviewer dex, digital employee experience +1 moreLog timestamp tampering vulnerability in Content Distribution Service6.5 Medium
- teamviewer dex, digital employee experience +1 moreLog Injection in Content Distribution Service UDP Handler6.5 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-RunPkgStatusRequest Instruction in TeamViewer DEX6.8 Medium
- oneflowAn input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor...6.2 Medium
- oneflowAn input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9...6.2 Medium
- color iccdeviccDEV has UB runtime error in <icTagTypeSignature>7.8 High
- flexense disk pulse enterprise, sync breeze enterprise server, diskpulse +1 more +3 moreRemote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server8.2 High
- oneflowAn input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows...7.5 High
- oneflowAn input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows...7.5 High
- tp-link systems inc. tapo c220 v1, tp-link tapo c220 firmware, tapo c520ws firmware +1 more +3 moreUnauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS7.1 High
- tp link systems inc. tapo c210 v3, tp-link tapo c220 firmware, tapo c520ws firmware +2 more +4 moreUnauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS7.1 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreMultiple cross-site scripting vulnerabilities in EZCast Pro II Dongle7.4 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreArbitrary file write to /tmp directory in EZCast Pro II Dongle5.7 Medium
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreCross-Site Request Forgery in EZCast Pro II Dongle6.8 Medium
- rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c9.3 Critical
- cpuid cpu-zThe kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed...5.5 Medium
- celabshq libcrux-ecdh, libcrux-ed25519, libcrux-psq +2 morelibcrux before 0.0.6 Cryptographic Implementation Bug Fixes8.7 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=15.5 Medium
- color iccdeviccDEV has Heap Buffer Overflow in icCurvesFromXml()8.8 High
- color iccdeviccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()7.1 High
- color iccdeviccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()7.1 High
- color iccdeviccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()7.1 High
- color iccdeviccDEV has Undefined Behavior in icSigCalcOp()7.1 High
- color iccdeviccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()8.8 High
- color iccdeviccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()8.8 High
- color iccdeviccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()7.1 High
- color iccdeviccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer Overflow7.1 High
- qos.ch sarl logback-coreMalicious logback.xml configuration file allows instantiation of arbitrary classes1.8 Low
- altium aes, on-prem enterprise server +1 moreSQL Injection in AES Due to Inactive SQL Parsing Configuration8.6 High
- group-office group office, intermesh groupoffice +1 moreGroup-Office has stored XSS vulnerability via unsanitized filenames5.1 Medium
- manageiqManageIQ vulnerable to DoS Attack when creating TimeProfiles7.1 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's use of assert functions can potentially lead to denial of service7.4 High
- apache solrApache Solr: Insufficient file-access checking in standalone core-creation requests7.1 High
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs...7.5 High
- Show moreLoading…