CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeInsufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47...7.5 High
- google chromeSide-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871...6.5 Medium
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...5.3 Medium
- google chromeInsufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871...5.3 Medium
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to...9.1 Critical
- google chromeInappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed...6.5 Medium
- google chromeInsufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47...4.3 Medium
- google chromeInsufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150...7.8 High
- google chromeInsufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0...7.5 High
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to...9.1 Critical
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to...9.1 Critical
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...8.8 High
- google chromeInsufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150...8.6 High
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...6.5 Medium
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...9.6 Critical
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...8.3 High
- google chromeInsufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0...8.3 High
- google chromeInsufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a...7.5 High
- google chromeInsufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47...8.8 High
- google chromeInsufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150...6.5 Medium
- google chromeInsufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...8.3 High
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...4.7 Medium
- google chromeInsufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.6 Medium
- google chromeInsufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871...8.1 High
- google chromeInsufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to...7.5 High
- google chromeInsufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47...8.1 High
- google chromeInsufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeInsufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871...8.8 High
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability5.6 Medium
- cap-go capgoCapgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates5.3 Medium
- ibm langflow oss, langflow +1 moreFlow Validation Bypass via Empty Component Type Field9.8 Critical
- paymenterPaymenter: URL parameter injection bypasses paid plan limits at checkout8.5 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)9.3 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)10.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)10.0 Critical
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker7.5 High
- apache activemq, apache software foundation activemq all, activemq stomp +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service7.5 High
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and...9.1 Critical
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and...7.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS...7.1 High
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and...5.5 Medium
- lxc incusIncus has an arbitrary file write on its client due to trusted image hash9.9 Critical
- opf openprojectOpenProject: Cache store poisoning leads to Remote Code Execution (RCE)9.6 Critical
- lxc incusIncus has an argument injection in backup compression algorithm leading to AFW and ACE9.9 Critical
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled4.9 Medium
- Show moreLoading…