CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring7.8 High
- linux, linux kernel +1 moredrm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring7.8 High
- linux, linux kernel +1 moreNFSv4/flexfiles: reject zero filehandle version count7.5 High
- linux, linux kernel +1 moreudf: reject descriptors with oversized CRC length8.4 High
- @fastify/http-proxy, fastify fastify\/http-proxy +1 more@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters10.0 Critical
- ibm langflow oss, langflow +1 moreMCP Server Configuration Validator Bypass via File Upload API8.8 High
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST...4.3 Medium
- zenhive mppMissing gas_limit validation in mpp Tempo fee-payer enables wallet drain8.2 High
- zenhive mppUnbounded access list in mpp Tempo fee-payer inflates gas cost per payment8.3 High
- zenhive mppUnbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain8.3 High
- zoom workplace desktop, workplace virtual desktop infrastructure, zoom communications workplace for windows +2 moreZoom Workplace VDI Plugin for Windows - Improper Input Validation9.8 Critical
- zoom communications workplace vdi plugin, zoom workplace virtual desktop infrastructure +1 moreZoom Workplace VDI Plugin for Windows - Improper Input Validation7.8 High
- zoom roomsImproper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an...7.8 High
- envoyproxy gatewayEnvoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure9.1 Critical
- bunkerity bunkerwebbunkerweb: Improper Input Validation and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in BunkerWeb6.1 Medium
- canonical ubuntu 14.04 lts, ubuntu 16.04 lts, ubuntu 18.04 lts +5 more +7 moreubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution9.0 Critical
serde_withcrates.ioserde_with: KeyValueMap serialization panics on empty sequence or map entries5.1 Medium- cyberdrop-dlCyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sites5.9 Medium
- decolua 9router9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding6.4 Medium
- tencent ncnnncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id7.1 High
- absolute secure accessInput validation error in Secure Access clients prior to 14.552.3 Low
mantisbt/mantisbtPackagistMantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs5.3 Medium- pegatron corp. tdelo64.sysCVE-2026-149616.2 Medium
- cisco roomos, roomos software, roomos cloud +2 moreCisco RoomOS Security Hardening Release - Input Validation Vulnerabilities7.5 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Authentication Bypass via HTTP-stream6.9 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)6.8 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)6.2 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.5 Medium
- adobe illustrator, illustrator desktop 2025, illustrator desktop 2026 +2 moreIllustrator | Improper Input Validation (CWE-20)9.3 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)7.7 High
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125...6.5 Medium
- google chromeInsufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0...5.3 Medium
- google chromeInsufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...8.3 High
- nvidia tensorrt-llmNVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API...6.2 Medium
- adobe premiere, premiere pro +1 morePremiere Pro | Improper Input Validation (CWE-20)5.9 Medium
- Show moreLoading…