CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- roxy-wiRoxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save9.9 Critical
- roxy-wiRoxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`9.9 Critical
- espressif esp-idfESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers7.1 High
- espressif esp-idfESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers9.3 Critical
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior6.5 Medium
- jetbrains runtime, sensiolabs symfony +1 moreSymfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch8.3 High
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Improper Input Validation (CWE-20)6.2 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.4 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.1 High
- adobe dreamweaver, dreamweaver desktop +1 moreDreamweaver Desktop | Improper Input Validation (CWE-20)6.3 Medium
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.5 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability3.9 Low
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- freeswitchFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing9.1 Critical
- freeswitchFreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing7.5 High
- netgear lbr1020, lbr1020 firmware, lbr20 +44 more +46 moreInsufficient authentication and input validation in certain NETGEAR products5.6 Medium
- netgear rbe970, rbe970 firmware, rbr750 +23 more +25 moreInsufficient input validation vulnerability in certain Orbi routers4.3 Medium
- netgear mr60, mr60 firmware, mr70 +51 more +53 moreInsufficient input validation in certain NETGEAR routers4.3 Medium
- netgear cax30, cax30 firmware, rax30 +5 more +7 moreCertain NETGEAR routers allow unauthenticated users to gain control of the router5.2 Medium
- netgear ex3700, ex3700 firmware, ex3800 +59 more +61 moreCertain NETGEAR routers allow authenticated administrators to gain unintended control of the router4.9 Medium
- netgear raxe450, raxe450 firmware, raxe500 +1 more +3 moreImproper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality4.3 Medium
- netgear mr70, mr70 firmware, ms70 +5 more +7 moreInsufficient input validation in certain NETGEAR routers6.9 Medium
- netgear jr6150, jr6150 firmware +1 moreInsufficient input validation vulnerability in NETGEAR JR61504.4 Medium
- netgear jr6150, jr6150 firmware +1 moreInsufficient input validation vulnerability in NETGEAR JR6150 Web UI4.3 Medium
- netgear r7000, r7000 firmware, rax20 +36 more +38 moreInsufficient input validation in certain NETGEAR routers1.9 Low
- google chromeInappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a...5.4 Medium
- google chromeInsufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed...9.6 Critical
- google chromeInsufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827...3.1 Low
- google chromeInsufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...8.1 High
- google chromeInsufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827...3.1 Low
- google chromeInappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103...4.3 Medium
- google chromeInappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a...8.3 High
- google chromeInsufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior...8.3 High
- google chromeOut of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who...3.1 Low
- google chromeInsufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103...5.4 Medium
- google chromeInsufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827...8.3 High
- google chromeInteger overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote...9.6 Critical
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103...6.5 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a...6.5 Medium
- nlnet labs routinatorRoutinator crashes on specifically crafted ASN strings in the API8.2 High
- apache software foundation cordova plugin inappbrowser, apache cordova inappbrowser +1 moreCordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews9.5 Critical
- songquanpeng one-apisongquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error2.3 Low
- boost serializationBoost Serialization improper validation of specified type of input6.3 Medium
- Show moreLoading…