CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- symfony twigTwig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points7.1 High
- cloudburstmc networkCloudburst Network erroneously handles invalid connections7.5 High
- dbgateDbGate: Unauthenticated Remote Code Execution via JSON Script Runner10.0 Critical
- tp-link systems inc. tapo c520ws v2, tp-link tapo c520ws firmware +1 moreDenial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS7.1 High
- arista networks eos / cloudvision exchange (cvx)Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages7.1 High
- arista networks eos / cloudvision exchange (cvx)Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server Messages7.1 High
- siderolabs omniOmni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic2.7 Low
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions7.5 High
- No product listedAn issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to...7.5 High
- google chromeInsufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to...7.7 High
- google chromeInsufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53...6.5 Medium
- google chromeInsufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53...4.3 Medium
- google chromeInsufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0...6.5 Medium
- google chromeInappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53...6.1 Medium
- google chromeInsufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0...8.8 High
- google chromeInappropriate implementation in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote...4.3 Medium
- google chromeInsufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53...4.3 Medium
- google chromeInsufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0...7.5 High
- google chromeInsufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53...3.1 Low
- google chromeInsufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53...5.3 Medium
- google chromeInsufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0...3.1 Low
- google chromeInsufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53...7.5 High
- google chromeInsufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53...8.0 High
- google chromeInsufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53...3.1 Low
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a...7.5 High
- google chromeInsufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53...8.3 High
- google chromeInsufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a...8.8 High
- google chromeInsufficient policy enforcement in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a...4.7 Medium
- google chromeInsufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53...6.5 Medium
- google chromeInsufficient validation of untrusted input in PointerLock in Google Chrome prior to 149.0.7827.53...4.3 Medium
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53...6.5 Medium
- google chromeInappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0...6.8 Medium
- google chromeInsufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827...9.6 Critical
- google chromeInsufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53...9.6 Critical
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149...6.1 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53...8.8 High
- google chromeInappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an...5.9 Medium
- google chromeInsufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53...9.6 Critical
- google chromeInsufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0...4.3 Medium
- google chromeInsufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53...6.5 Medium
- google chromeInsufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0...8.6 High
- google chromeInsufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0...7.5 High
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53...7.5 High
- google chromeInsufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53...9.6 Critical
- google chromeOut of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a...6.5 Medium
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an...4.3 Medium
- google chromeInsufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53...6.5 Medium
- google chromeInsufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149...9.6 Critical
- Show moreLoading…