CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- mispMISP User-controlled order parameter in correlations over-correlation endpoint6.4 Medium
- No product listedAn issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to...6.8 Medium
- jupyter enterprise gatewayJupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed9.8 Critical
- linux, linux kernel +1 moreinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 Critical
- mbs double-a profibus, double-a x-link, double-x can +16 more +18 moreArbitrary process termination vulnerability in method ugw-logstop7.2 High
frrAlmaLinux,frr10AlmaLinux,frr10-debuginfoRed Hat +6 more +8 moreMissing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable...7.5 High- wireapp wire-ioswire-ios has Persistent Remote DoS via Integer Underflow6.5 Medium
- aiven-open klawKlaw: user lockout due to case sensitivity inconsistency2.7 Low
- progress sitefinityCWE-20: Improper Input Validation in web services in Progress Sitefinity8.8 High
- takien word replacerWord Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter4.4 Medium
- foundationagents metagptFoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization4.8 Medium
- google androidIn multiple locations, there is a possible way to reveal images across users due to improper...7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moresmb: client: reject userspace cifs.spnego descriptions7.1 High
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector8.1 High
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass8.8 High
- otrs, otrs ag ((otrs)) community edition +1 moreSQL Injection via MySQL Quote Method9.1 Critical
- google androidIn multiple functions of DevicePolicyManagerService.java, there is a possible desync from...5.5 Medium
- google androidIn iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input...4.0 Medium
- google androidIn applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large...5.5 Medium
- google androidIn setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence...7.8 High
- google androidIn multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a...5.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system...6.5 Medium
- google androidIn multiple functions of AccessibilityManagerService.java, there is a possible persistent denial...5.5 Medium
- goauthentik authentikauthentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user8.5 High
- agenticmail @agenticmail/api, @agenticmail/core +1 moreAgenticMail API/storage and outbound relay hardening8.2 High
tarcrates.iotar has a PAX header desynchronization issueNo score- yhirose cpp-httplibcpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding5.3 Medium
- open-quantum-safe liboqsliboqs: XMSS Buffer Overread Bug5.3 Medium
- dokployDokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline9.6 Critical
- mouse07410 asn1cmouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER Payload8.2 High
- google chromeInsufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216...8.8 High
- google chromeInsufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0...8.3 High
- google chromeInsufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216...6.5 Medium
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to...7.8 High
- google chromeInsufficient validation of untrusted input in OptimizationGuide in Google Chrome prior to 148.0...4.2 Medium
- google chromeInsufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0...5.3 Medium
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216...8.3 High
- google chromeInsufficient validation of untrusted input in Printing in Google Chrome prior to 148.0.7778.216...5.0 Medium
- google chromeInsufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216...5.0 Medium
- google chromeInsufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0...8.3 High
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216...8.8 High
- google chromeInsufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216...3.1 Low
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216...8.3 High
- google chromeInsufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778...5.0 Medium
- google chromeInsufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778...8.3 High
- google chromeInsufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216...8.3 High
- google chromeInsufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216...8.3 High
- elastic kibanaImproper Input Validation in Kibana Fleet Leading to Privilege Escalation7.2 High
- projectcapsule capsuleCapsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability6.9 Medium
- Show moreLoading…