CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- terria terriajs-serverTerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist8.7 High
- freerdpFreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read4.3 Medium
- budibaseBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)9.9 Critical
- rustfsRustFS's Missing Post Policy Validation leads to Arbitrary Object Write8.1 High
- trellix endpoint hx agent (xagent), endpoint security +1 moreA vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor...6.2 Medium
- caddyserver caddyCaddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport8.9 High
- caddyserver caddyCaddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections6.9 Medium
- lfprojects valkey-bloomRemote DoS from malformed RESTORE command6.5 Medium
- free5gc udmfree5GC has Improper Input Validation in UDM UEAU Service6.6 Medium
- free5gc udmfree5GC has Improper Input Validation in UDM, Leading to Information Exposure6.6 Medium
- free5gc udmfree5GC has Improper Error Handling in UDM, Leading to Information Exposure6.6 Medium
- free5gc go-upf, smf +1 morefree5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption2.7 Low
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 9 +2 moreValkey has Pre-Authentication DOS from malformed RESP request7.5 High
- zscaler zia admin ui, internet access admin portal +1 moreZIA Admin UI Input Validation Bug7.6 High
- zscaler zia admin ui, internet access admin portal +1 moreUnauthorized information retrieval in ZIA Admin UI5.5 Medium
- datapizza ai, datapizza-labs datapizza-ai +1 moredatapizza-labs datapizza-ai cache.py RedisCache deserialization2.1 Low
- funadminfunadmin Backend Endpoint AuthCloudService.php getMember deserialization5.1 Medium
- opensiftOpenSift: SSRF risk in URL ingestion endpoint7.1 High
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table5.4 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute5.4 Medium
- ss88 uk two factor (2fa) authentication via emailTwo Factor (2FA) Authentication via Email <= 1.9.8 - Two-Factor Authentication Bypass via token6.5 Medium
- ethereum go-ethereum, go ethereum +1 moreGo Ethereum affected by DoS via malicious p2p message8.7 High
- jeecg bootJeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization2.3 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: fix segmentation of forwarding fraglist GRO5.5 Medium
- free5gcAn improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows...7.5 High
- xpertforextradeinc cedipayCediPay Affected by Improper Input Validation in Payment Processing8.8 High
- php frankenphpFrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files8.9 High
- qs project qsqs's arrayLimit bypass in comma parsing allows denial of service6.3 Medium
- apple ipados, macos, visionos +3 more +5 moreAn issue existed in the handling of environment variables. This issue was addressed with improved...5.5 Medium
- microsoft power bi report serverPower BI Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.3 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- No product listedImproper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0...7.1 High
- No product listedImproper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0...7.1 High
- adminerAdminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint7.5 High
- litestarFileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)6.5 Medium
- tpadmin project tpadminyuan1994 tpadmin WebUploader preview.php deserialization6.9 Medium
- actix actix-filesactix-files before 0.6.10 Denial of Service via empty Range header6.9 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions7.7 High
- anthropic claude code, anthropics claude-code +1 moreClaude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection7.7 High
- kubernetes ingress-nginxingress-nginx auth-proxy-set-headers nginx configuration injection8.8 High
- silabs simplicity software development kit, silabs.com emberznet sdk +1 moreTruncated 802.15.4 packet leads to denial of service5.3 Medium
- apache tomcat, tomcat native, red hat enterprise linux 10 +10 more +12 moreApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 High
- apache tomcatApache Tomcat: Security constraint bypass with HTTP/0.93.7 Low
- apache tomcatApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Critical
- n8nDomain allowlist bypass enables credential exfiltration5.3 Medium
- openclawOpenClaw Affected by Unauthenticated Local RCE via WebSocket config.apply8.4 High
- n8nn8n Vulnerable to Command Injection in Community Package Installation9.4 Critical
- linux, linux kernel +1 morenet/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefou: Don't allow 0 for FOU_ATTR_IPPROTO.7.8 High
- Show moreLoading…