CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
gmaps-mcpPyPIgmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense8.3 High- linux, linux kernel +1 morexfs: fix undersized l_iclog_roundoff values8.2 High
- mervinpraison praisonaiPraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries6.3 Medium
- mervinpraison praisonaiPraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection9.4 Critical
anchor-langcrates.ioAnchor: `InterfaceAccount` allows account substitution between unexpected types8.7 High- legeling prompthubPromptHub: Authenticated SSRF via IPv6 filter bypass in `POST /api/skills/fetch-remote`7.1 High
- electermelecterm: dangerous code can be run through links or command line9.4 Critical
- enchant97 note-markNote Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code Execution8.6 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability9.0 Critical
- neorazorx facturascriptsRemote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism7.2 High
- cinnyapp cinnyCinny: Access token disclosure via invalidated emoji pack avatar URL in service worker7.1 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreAn Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1...7.2 High
- anchor-lang anchorAnchor: Program<'info, System> is not properly validated8.2 High
- open notebook notebook, lfnovo open-notebook +1 moreArbitrary File Read via Local File Inclusion (LFI)8.2 High
- open notebook notebook, lfnovo open-notebook +1 moreArbitrary File Write Through Path Traversal7.0 High
- open notebook notebook, lfnovo open-notebook +1 moreRemote Code Execution (RCE) via Server-Side Template Injection (SSTI)9.2 Critical
- open notebook notebook, lfnovo open-notebook +1 moreSurrealDB Injection on Open Notebook8.7 High
- free5gcfree5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm7.7 High
github.com/apple/containerSwiftURLcontainer: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command1.9 Lowkanidmd_libcrates.iokanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input6.9 Medium- shellhubShellHub: Crash-DoS via field injection in filter and sort-by parameters5.4 Medium
- getgrav grav-plugin-formGrav: Anonymous Page Content Overwrite via Form File Upload filename Override7.7 High
- emmett-framework granianGranian: Unauthenticated DoS via WebSocket subprotocol header panic7.5 High
- google chromeInsufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96...4.3 Medium
- google chromeInsufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778...6.3 Medium
- google chromeInsufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96...7.5 High
- google chromeInsufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96...4.3 Medium
- google chromeInsufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96...5.4 Medium
- google chromeInsufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to...8.8 High
- google chromeInsufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96...5.4 Medium
- google chromeInsufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778...7.8 High
- google chromeInsufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed...4.2 Medium
- google chromeInsufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0...4.2 Medium
- google chromeInsufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148...8.8 High
- google chromeInsufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0...7.8 High
- google chromeInsufficient data validation in DataTransfer in Google Chrome prior to 148.0.7778.96 allowed a...4.2 Medium
- google chromeInsufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96...3.1 Low
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96...8.3 High
- google chromeInsufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778...3.1 Low
- google chromeInsufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96...3.1 Low
- google chromeInsufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96...4.2 Medium
- google chromeInsufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed...5.4 Medium
- google chromeInsufficient validation of untrusted input in Permissions in Google Chrome prior to 148.0.7778.96...4.3 Medium
- google chromeInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96...6.1 Medium
- google chromeInsufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96...4.2 Medium
- google chromeInsufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96...3.1 Low
- google chromeInsufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0...3.1 Low
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96...4.2 Medium
- google chromeInsufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0...4.4 Medium
- google chromeInsufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778...4.2 Medium
- Show moreLoading…