CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- linuxipv4: validate checksum_start before completing checksum9.3 Critical
- hewlett packard enterprise hpe nonstop sql/mx udr serverHPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability7.3 High
- hewlett packard enterprise hpe nonstop sql/mx run-time statisticsHPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability6.4 Medium
- hewlett packard enterprise hpe nonstop kms serverHPE Nonstop KMS Server - Buffer overflow vulnerability2.8 Low
- hewlett packard enterprise hpe nonstop sql/mx sqlcatHPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability7.4 High
- hewlett packard enterprise hpe nonstop http webserverHPE NonStop HTTP WEBSERVER - Memory corruption vulnerability8.2 High
- hewlett packard enterprise hpe nonstop soap 4.0HPE NonStop SOAP 4.0 - Memory corruption8.2 High
- hewlett packard enterprise hpe nonstop qiomonHPE NonStop QIOMON - Memory corruption vulnerability7.6 High
- hewlett packard enterprise hpe nonstop cipsamHPE NonStop CIPSAM - Memory corruption vulnerability8.7 High
- nodemailerNodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments6.9 Medium
- automattic mongooseMongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection7.5 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used7.1 High
- rabbitmq rabbitmq-serverRabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation5.3 Medium
- bytecodealliance wasmtimeWasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling2.1 Low
- hewlett packard enterprise hpe nonstop itp webserverHPE NonStop iTP WebServer - Memory corruption vulnerability8.2 High
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network and under certain conditions could exploit an...8.1 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.3 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.3 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.9 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Input Validation (CWE-20)5.3 Medium
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +10 more +12 moreMicrosoft SQL Server Remote Code Execution Vulnerability6.7 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)9.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.4 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)7.5 High
- auth0 java-jwtOut-of-Range Timestamp Claim Handling in auth0/java-jwt5.3 Medium
- okta credential provider for windowsImproper Input Validation in the Okta Credential Provider for Windows6.0 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Input Validation (CWE-20)9.1 Critical
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Improper Input Validation (CWE-20)9.9 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Partition Management Driver Remote Code Execution Vulnerability9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Internet Information Services Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Spaceport.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows GDI Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Update Stack Spoofing Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Bluetooth Port Driver Remote Code Execution7.1 High
- microsoft sharepoint server, sharepoint server subscription edition +1 moreMicrosoft SharePoint Server Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability8.8 High
- Show moreLoading…