CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input...8.8 High
- google androidIn Modem, there is a possible information disclosure due to improper input validation. This could...7.5 High
- google androidIn Cellular Modem, there is a possible denial of service due to improper input validation. This...6.5 Medium
- google androidIn Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to...8.8 High
- google androidIn validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper...4.4 Medium
- google androidIn Trusted Execution Environment, there is a possible memory corruption due to improper input...6.7 Medium
- google androidIn VPU, there is a possible shared memory overwrite due to improper input validation. This could...6.7 Medium
- google androidIn multiple locations, there is a possible out-of-bounds write due to improper input validation....6.7 Medium
- google androidIn printf of printf.c, there is a possible out-of-bounds write due to improper input validation....6.7 Medium
- google androidIn Cellular Modem, there is a possible denial of service due to improper input validation. This...7.5 High
- google androidIn parsePartHeaders of multiple files, there is a possible persistent denial of service due to...6.5 Medium
- google androidIn multiple locations, there is a possible improper data sanitization due to a logic error in the...3.3 Low
- google androidIn multiple functions of XmpDataParser.java, there is a possible improper data sanitization due...3.3 Low
- google androidIn initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent...7.3 High
- google androidIn gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper...7.8 High
- extend themes kubio ai website builderWordPress Kubio AI Website Builder - Denial Of Service6.9 Medium
- ash-project ash graphqlUnhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment6.9 Medium
- linux foundation magmaLinux Foundation Magma NGSetupRequest input validation6.9 Medium
- wwbn avideoWWBN AVideo SSRF Filter Bypass via NAT64 Hex Address7.1 High
- chatgptnextweb nextchatNextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure8.7 High
- free5gcfree5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints9.3 Critical
- envoyproxy envoyEnvoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values7.5 High
- envoyproxy envoyEnvoy ext_authz: request `:path` pseudoheader dereferenced w/o null check7.5 High
- envoyproxy envoyEnvoy: oghttp2 upstream trailers incorrect handling7.5 High
- watchguard fireware osFireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- spring integration, vmware spring integration +1 moreEmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders6.3 Medium
- spring cloud function, vmware spring cloud function +1 morePotential for improper filtering of HTTP headers in Spring Cloud Function3.1 Low
- silverstripe silverstripe-advancedworkflowSilverstripe Advanced Workflow: Remote code execution via advanced workflow email template7.2 High
- silverstripe silverstripe-userformsSilverstripe UserForms: Remote code execution via userforms email subject8.8 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass6.9 Medium
- limanmys coreLiman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)9.1 Critical
- flowintelFlowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input6.9 Medium
- flowintelFlowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys8.6 High
- vmware spring security, vmware by broadcom spring security (oauth2 authorization server module) +1 moreSpring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata9.6 Critical
- spring integration, vmware spring integration +1 moreDefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names5.4 Medium
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedImproper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc...7.5 High
- No product listedImproper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1...7.5 High
- No product listedImproper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing...7.5 High
- hclsoftware travelerAn input reflection vulnerability affects HCL Traveler3.5 Low
- zephyrproject zephyrOut-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handler3.1 Low
- ubiquiti inc unifi talk applicationA malicious actor with access to the network could exploit an Improper Input Validation...10.0 Critical
- ubiquiti inc unifi enterprise audio/video bridgeA malicious actor with access to the network could exploit an Improper Input Validation...9.8 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- Show moreLoading…