CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- ubiquiti inc uid enterprise agentA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi os serverA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi os serverA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network could exploit an Improper Input Validation...10.0 Critical
- ubiquiti inc unifi network applicationA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- admin by request (abr) by request (abr)Insufficient input validation in Admin By Request (ABR)7.8 High
- drupal powerful surveysPowerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-0925.7 Medium
- google chromeImproper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeImproper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65...6.5 Medium
- google chromeImproper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeImproper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeImproper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65...6.5 Medium
- google chromeImproper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65...6.5 Medium
- google chromeImproper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977...4.3 Medium
- google chromeImproper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote...4.2 Medium
- google chromeImproper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote...8.8 High
- google chromeImproper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote...8.8 High
- google chromeImproper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed...7.5 High
- google chromeImproper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeImproper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a...8.8 High
- google chromeImproper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeImproper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a...8.3 High
- google chromeImproper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeImproper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeImproper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed...8.3 High
- google chromeImproper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote...5.9 Medium
- google chromeImproper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeImproper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeImproper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeImproper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeImproper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote...8.3 High
- google chromeImproper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...6.8 Medium
- google chromeImproper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeImproper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeImproper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeImproper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeImproper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65...6.5 Medium
- google chromeImproper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote...8.3 High
- academysoftwarefoundation openexrOpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)6.7 Medium
- adobe c2pa, c2pa tool, c2patool +1 more +3 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2patool +1 more +3 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.5 Medium
- kaltura html5 video player, html5lib libraryCVE-2026-199137.5 High
- kaltura html5 video player, html5 libraryCVE-2026-199129.8 Critical
- vrana adminerAdminer before 5.5.0 Open Redirect via X-Forwarded-Prefix5.3 Medium
- Show moreLoading…