CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with matc…7.1 High
- google chromeImproper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...7.6 High
- flowiseai flowiseFlowise before 3.1.4 Remote Code Execution via cwd Parameter9.0 Critical
- openbankproject obp-apiOpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization2.1 Low
- mispMISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent6.9 Medium
- bizwell xclickImproper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects...5.1 Medium
- No product listedImproper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9...8.1 High
- No product listedAn issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7...7.5 High
- apple macosA denial-of-service issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple macosA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...8.8 High
- apple ipados, ios and ipados, iphone os +2 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- ibm common licensingMultiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent6.2 Medium
october/octoberPackagistOctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery6.9 Medium- zscaler client connectorAndroid ZCC denial of service7.5 High
- zscaler client connectorAndroid ZCC VPN API method privilege escalation8.1 High
- apache software foundation storm nimbusApache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keys9.1 Critical
- mispMISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials9.3 Critical
- rustlsRustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass6.9 Medium
- fedml-ai fedmlFedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserialization5.3 Medium
- phpgurukul small crmPHPGurukul Small CRM Login Success login.php unserialize deserialization6.3 Medium
- lenve vhrlenve vhr MailReceiver deserialization5.3 Medium
- shopperdotcom shopperShopper: Negative discount values accepted and propagated through order calculation pipeline6.5 Medium
- perforce puppet enterpriseCommand Injection in Puppet Enterprise8.6 High
- wso2 api control plane, api manager +1 moreReverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft4.7 Medium
- google cloud gemini cliArbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME7.7 High
- nationalsecurityagency skills-serviceNationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover9.6 Critical
- smithyhq sqladminSQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`5.3 Medium
- grokability snipe-itSnipe-IT before 8.7.0 Improper Input Validation via API Checkout5.3 Medium
- apache activemq, activemq all, activemq broker +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId7.5 High
- apache parquet, apache software foundation parquet hadoop +1 moreApache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation8.1 High
- lumi h5p-nodejs-libraryStored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education5.2 Medium
- samsung android, samsung mobile tips +1 moreImproper input validation in Samsung Tips prior to Android 17 allows local attackers to launch...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local...8.4 High
- samsung android, samsung mobile devices +1 moreImproper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026...6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026...6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to...4.8 Medium
- insyde software insydeh2oH19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.8.2 High
- tile-ai tilelangtile-ai tilelang Kernel Cache kernel_cache.py KernelCache._load_kernel_from_disk deserialization5.1 Medium
- google chromeImproper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeImproper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeImproper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote...8.3 High
- google chromeImproper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36...6.5 Medium
- google chromeImproper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote...4.2 Medium
- google chromeImproper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a...5.4 Medium
- google chromeImproper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- Show moreLoading…