CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreA stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and...5.3 Medium
- apple macosA validation issue existed in the entitlement verification. This issue was addressed with...8.4 High
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS has pre-auth server panic via leafnode handling7.5 High
- tibco activematrix businessworks, enterprise administrator +1 moreTIBCO ActiveMatrix BusinessWorks Injection Vulnerability8.7 High
- ubiquiti inc unifi network serverAn Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access...8.8 High
- astroAstro: Remote allowlist bypass via unanchored matchPathname wildcard2.9 Low
- molotovcherry android-imagemagick7CWE-20 in MolotovCherry Android-ImageMagick79.8 Critical
- tp-link systems inc. td-w8961n v4.0, tp-link td-w8961nd firmware +1 moreDenial of Service (DoS) in HTTPD Input Handling on TP-Link TD-W8961N7.1 High
- linuxfoundation pytorchPyTorch pt2 Loading deserialization4.8 Medium
- appmaxplataforma appmaxAppmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint5.3 Medium
- xjb rest api to miniprogramREST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter5.3 Medium
- longturn freeciv21Crash when receiving specially-crafted packets7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnames5.4 Medium
- python, python software foundation cpython, red hat ai inference server 3.2 +24 more +26 morewebbrowser.open() allows leading dashes in URLs7.0 High
- discourseDiscourse has a poll authorization bypass via post_id array parameter5.3 Medium
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153...8.8 High
- synacor zimbra collaboration suiteZimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox...4.3 Medium
- kubernetes ingress-nginx, nginx ingress controller +1 moreingress-nginx comment-based nginx configuration injection8.8 High
- wolfsslImproper key_share validation in TLS 1.3 HelloRetryRequest1.2 Low
- dataease sqlbotSQLBot: Remote Code Execution via Terminology Poisoning8.6 High
- zauberzeug niceguiNiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion6.9 Medium
- collerek ormarormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor7.1 High
- chrimle io.github.chrimle:openapi-to-java-records-mustache-templates-parentUnpacking Arbitrary Mustache Template Files via `maven-dependency-plugin`2.3 Low
- xpdfOut-of-bounds array write in Xpdf 4.06 due to missing validation2.1 Low
- socketio socket.io, socket socket.io-parser +1 moresocket.io allows an unbounded number of binary attachments8.7 High
- apple ipados, macos, safari +3 more +5 moreA cross-origin issue in the Navigation API was addressed with improved input validation. This...5.4 Medium
- hcl sametimeBoolean-Based SQL Injection in Multiple Unica Components2.7 Low
- filebrowserFile Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely5.3 Medium
- python, python software foundation cpython +1 moreIncomplete control character validation in http.cookies6.0 Medium
- pluginsglpi fieldsFields GLPI plugin vulnerable to RCE in dropdown generation9.1 Critical
- softing smartlink sw-ht, smartlink sw-pn +1 moreGlobal file reads caused by improper URL checks in webserver5.3 Medium
- openatom openharmonyability_ability_runtime an improper input validation vulnerability5.0 Medium
- openatom openharmonycommunication_ipc an improper input validation vulnerability3.3 Low
- forceu gokapiGokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload4.3 Medium
- drakkan sftpgoSFTPGo improperly sanitizes placeholders in group home directories/key prefixes5.3 Medium
- tp-link omada sg2005p-pd firmware, omada sg2008 firmware, omada sg2008p firmware +98 more +100 moreInput Validation Vulnerability on Multiple Omada Switches7.7 High
- emmansun gmsmGo ShangMi SM9 Infinity-Point Ciphertext Forgery Vulnerability7.5 High
- apache livyApache Livy: Restrict file access6.3 Medium
- gvectors wpdiscuzwpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient6.3 Medium
- python, python software foundation cpython +1 moretarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling2.0 Low
- citeum openctiOpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature7.7 High
- @backstage plugin-auth-backend, linuxfoundation backstage +1 more@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass5.9 Medium
- alfresco activitiAlfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization5.3 Medium
- zoom roomsZoom Rooms for Windows - Improper Input Validation7.0 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)5.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)5.3 Medium
- anchore quillSSRF in Quill via unvalidated URL from Apple notarization log retrieval5.3 Medium
- No product listedImproper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms...8.7 High
- Show moreLoading…