CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- progress sharefile storage zones controllerArbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution7.2 High
- oppo healthArbitrary URL Loading in WebView Leading to Token Leakage Risk8.3 High
- linuxnet: mana: Validate the packet length reported by the NIC9.8 Critical
- linuxipvs: use parsed transport offset in SCTP state lookup8.2 High
- linuxipvs: fix more places with wrong ipv6 transport offsets9.8 Critical
- linuxwifi: mac80211: validate extension-frame layout before RX8.8 High
- dotonpaper pinpoint booking system – version 2Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter5.3 Medium
- ondata ckan-mcp-serverCKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)5.3 Medium
- alldatacenter alldataalldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserialization6.9 Medium
- triggerdotdev trigger.devTrigger.dev: Cross-tenant object store read and write via URL path traversal8.2 High
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 morePodman: podman: quadlet install --replace non-truncating write retains removed host-access directives4.2 Medium
- zalktis programmas (sia "zalktis programmas") zalktisZalktis: SQL injection via partner-controlled fields in imported e-invoices8.7 High
- linuxKVM: s390: pci: Fix handling of AIF enable without AISB8.8 High
- pimcorePimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name8.5 High
- smewebify weberpmesv2WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)9.8 Critical
- nodejs undiciundici vulnerable to response truncation via oversized chunked responses in the dump interceptor3.7 Low
- mongodb atlas sql odbc driver, odbc driver, schema builder cli +1 more +3 moreInsufficient OIDC endpoint validation could invoke unintended local protocol handlers6.3 Medium
- jfrog artifactoryPotential cache poisoning in JFrog Artifactory8.8 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in SQL4.3 Medium
- thorsten phpmyfaqphpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration5.4 Medium
- linuxdrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 High
- intel xeon bronze 3408u, xeon bronze 3408u firmware, xeon bronze 3508u firmware +138 more +140 moreImproper input validation for some Intel(R) Xeon(R) processors within firmware may allow an...4.0 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 morePowerpoint Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 morePowerpoint Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 morePowerpoint Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +10 more +12 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 morePowerpoint Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 morePowerpoint Information Disclosure Vulnerability5.5 Medium
- microsoft power bi report serverPower BI Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.1 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)4.0 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)6.5 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.2 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)4.9 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.7 High
- intel vllm hardwareImproper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before...6.8 Medium
- intel neural compressorImproper input validation for some Intel(R) Neural Compressor software before version v3.7 within...4.8 Medium
- No product listedImproper input validation in some firmware for some Intel(R) Active Management Technology (Intel...8.2 High
- netgear r7000, r7000 firmware +1 moreInsufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.4.3 Medium
- netgear rax20, rax20 firmware, rax35v2 +35 more +37 moreStack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers1.9 Low
- netgear be9300 firmware, mr60 firmware, ms60 firmware +26 more +28 moreInsufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.4.3 Medium
- netgear rax20, rax20 firmware, rax41 +23 more +25 moreSome NETGEAR Nighthawk devices allow administrators to tamper with the device4.3 Medium
- truelockmc streambertStreambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler10.0 Critical
- Show moreLoading…