CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- vllmvLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n8.2 High
- parse-community parse-serverParse Server 9.0.0 before 9.10.4-alpha.3 Reserved Field Name Injection via Object Writes6.3 Medium
- nodemailerNodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser8.3 High
- langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 moreLangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores6.0 Medium
- intranda goobi-viewer-coreGoobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters5.3 Medium
- intranda goobi-viewer-coreGoobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection5.3 Medium
- baserproject basercmsbaserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients5.3 Medium
- eclipse foundation keypont - goseJwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)6.3 Medium
- part-db part-db-serverPart-DB: Spreadsheet Formula Injection in XLSX Part Exports4.6 Medium
- okta access gatewayCommand Execution via Admin Console Input in Okta Access Gateway9.1 Critical
- subhajitkhan online-clinic-management-systemsubhajitkhan online-clinic-management-system Appointment Booking patappointtime.php input validation5.1 Medium
- cisco ios xr softwareCisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability7.5 High
- cisco emergency responder, unified communications manager, unity connection +1 more +3 moreCisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities8.8 High
- cisco secure clientCisco Secure Client Privilege Escalation Vulnerability5.5 Medium
- py-pdf pypdfpypdf: Unvalidated JPEG image data loading2.3 Low
- wso2 api manager, carbon identity application, carbon identity core +5 more +7 moreSensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage4.0 Medium
- eclipse foundation openj9JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing8.7 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...7.8 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...7.8 High
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...7.0 High
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...6.5 Medium
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...7.5 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...7.5 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...8.2 High
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...9.9 Critical
- google chromeImproper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeImproper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeImproper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47...8.8 High
- google chromeImproper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- google chromeImproper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeImproper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- google chromeImproper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a...9.6 Critical
- google chromeUse after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeImproper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47...8.8 High
- google chromeMemory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeImproper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- Show moreLoading…