CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- drupal commerce elavonCommerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-0849.8 Critical
- dell powerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input...6.7 Medium
- dell powerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input...9.1 Critical
- dell powerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input...9.1 Critical
- dell powerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input...7.2 High
- nlnet labs unbound'dns-error-reporting: yes' leads to stack buffer overflow7.5 High
- thinkst opencanaryDenial-of-Service in OpenCanary's MongoDB module6.9 Medium
- hikvision ds-2cd series, ds-2de series, ds-2dp series +1 more +3 moreInsufficient validation of input parameters in the firmware of some Hikvision cameras allows...7.5 High
- google chromeInsufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150...7.5 High
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182...5.4 Medium
- google chromeInsufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182...7.8 High
- google chromeInappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a...8.8 High
- oracle e-business suite, succession planning +1 moreVulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component:...6.3 Medium
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle goldengateVulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected...5.8 Medium
- oracle bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)...9.9 Critical
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.3 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle jd edwards enterpriseone configuratorVulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards ...6.4 Medium
- oracle corporation peoplesoft enterprise cs student records, oracle peoplesoft enterprise campus software campus community +1 moreVulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft ...6.6 Medium
- oracle corporation peoplesoft enterprise cs student records, oracle peoplesoft enterprise campus software campus community +1 moreVulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft ...8.8 High
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: Installation). Supported versions that are affected...6.7 Medium
- tenable security centerAn authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to...9.4 Critical
- progress sharefile storage zones controllerPath traversal in Progress ShareFile Storage Zones Controller (SZC)8.7 High
- moby buildkitPossible panic when incorrect parameters sent from frontend6.3 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the DOM: Copy & Paste and Drag & Drop component7.5 High
- oyatek mapsvg – vector maps, image maps, google mapsMapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint7.2 High
- apache mina sshdApache MINA SSHD: Remote execution of JGit commands can write files on the server5.4 Medium
- neutrinolabs xrdpxrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification5.3 Medium
- piwigoPiwigo RCE via PHP Code Injection into Config File in Installer9.8 Critical
- heyformHeyForm: completeSubmission persists submitter-supplied hidden fields verbatim without validating against the form's declared hidden-field set5.8 Medium
- surrealdbSurrealDB before 3.2.0 Denial of Service via malformed SurrealML import6.9 Medium
- libgit2libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data7.5 High
- meshtastic firmwareMeshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failure7.5 High
- linux, linux kernel +1 moreipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 High
- linux, linux kernel +1 moreKVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits9.0 Critical
- linux, linux kernel +1 morenet: tls: prevent chain-after-chain in plain text SG9.8 Critical
- linux, linux kernel +1 morewifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled9.8 Critical
- linux, linux kernel +1 moreKVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor8.8 High
- linux, linux kernel +1 morenetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings7.8 High
- Show moreLoading…