CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedImproper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference...7.1 High
- No product listedImproper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms...8.7 High
- No product listedImproper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may...7.1 High
- No product listedImproper input validation in the UEFI firmware for some Intel Reference Platforms may allow an...5.9 Medium
- envoyproxy envoyEnvoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation7.5 High
- envoyproxy envoyCrash for scoped ip address in Envoy during DNS5.9 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft azure iot explorerAzure IOT Explorer Spoofing Vulnerability7.5 High
- microsoft system center operations manager, system center operations manager 2019, system center operations manager 2022 +1 more +3 moreSystem Center Operations Manager (SCOM) Elevation of Privilege Vulnerability8.8 High
- kubernetes ingress-nginxingress-nginx rewrite-target nginx configuration injection8.8 High
- freebsdRemote code execution via ND6 Router Advertisements7.2 High
- linuxfoundation yocto, unisoc (shanghai) technologies co., ltd. udx710 +1 moreIn modem, there is a possible improper input validation. This could lead to remote denial of...7.5 High
- apache iotdbApache IoTDB: JEXL Expression Injection Vulnerability9.8 Critical
- apich-organization rssnRSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface9.4 Critical
- psf blackBlack's vulnerable version parsing leads to RCE in GitHub Action8.7 High
- maximmasiutin tinywebTinyWeb: HTTP Header Control Character Injection into CGI Environment9.2 Critical
github.com/OliveTin/OliveTinGoOliveTin has crash on NPE by calling APIs with invalid bindings or log references5.3 Medium- nltk, nltk nltk/nltk +1 moreArbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading10.0 Critical
- tp-link omada eap610 firmware, tp-link systems inc. eap610 v3 +1 moreUnauthenticated Denial-of-Service Vulnerability in Omada EAP6106.9 Medium
- agentgatewayAgentgateway: Missing parameter sanitization in MCP to OpenAPI conversion4.9 Medium
- suprema biostar 2Suprema BioStar 2 Insecure Password Change4.8 Medium
- google chromeInsufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a...9.6 Critical
- cisco adaptive security appliance software, secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 more +3 moreA vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD...6.8 Medium
- seppmail secure email gateway, seppmail +1 moreS/MIME Decryption Tag Sanitization Bypass8.2 High
- devolutions serverImproper input validation in the error message page in Devolutions Server 2025.3.15 and earlier...9.8 Critical
- devolutions remote desktop managerImproper enforcement of the Disable password saving in vaults setting in the connection entry...9.8 Critical
- samsung exynos 1280 firmware, exynos 1380 firmware, exynos 1480 firmware +4 more +6 moreAn issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580,...5.5 Medium
- weintek easyweb, cmt-3072xh2 firmware +1 moreA command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb...9.8 Critical
- openclawOpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass9.4 Critical
- google androidIn setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy...8.4 High
- google androidIn multiple locations of AppOpsService.java, there is a possible persistent denial of service due...6.2 Medium
- google androidIn isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service...6.2 Medium
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...7.5 High
- google androidIn multiple locations, there is a possible persistent denial of service due to improper input...5.5 Medium
- google androidIn multiple functions of ProfilingService.java, there is a possible persistent denial of service...6.2 Medium
- google androidIn multiple functions of ProfilingService.java, there is a possible persistent denial of service...6.2 Medium
- google androidIn hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to...8.4 High
- vimVim has a heap-buffer-overflow and a segmentation fault5.3 Medium
- tokuhirom http::session2, http\ +1 moreHTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend6.5 Medium
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie has an improper path normalization vulnerability8.2 High
- centreon open tickets on central server, web +1 moreCommand Injection via CLAPI generatetraps9.1 Critical
- n8nn8n - Guardrail Node Bypass via Crafted Input6.3 Medium
- elastic kibanaImproper Input Validation in Kibana Leading to Denial of Service6.5 Medium
- koajs koa, red hat developer hub, openshift ai (rhoai) +4 more +6 moreKoa has Host Header Injection via `ctx.hostname`7.5 High
- Show moreLoading…