CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- opencatsOpenCATS: Authenticated SQL injection in activity DataGrid date filters7.6 High
- grafana oss, enterprise +1 moreServer-side expression parser denial of service6.5 Medium
- grafana enterprise, oss +1 moreAzure Monitor access token disclosure via SSRF7.7 High
- apache software foundation kafkaApache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation7.5 High
- hcl software bigfix aexHCL BigFix AEX is affected by multiple security vulnerabilities.3.7 Low
- google chromeImproper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...9.6 Critical
- google chromeImproper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...8.8 High
- google chromeImproper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...8.8 High
- google chromeImproper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed...9.6 Critical
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeImproper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote...9.6 Critical
- google chromeImproper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote...9.6 Critical
- google chromeImproper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...8.8 High
- google chromeImproper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a...9.6 Critical
- google chromeImproper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- mozilla thunderbirdRequest forgery via news: links8.8 High
- misp misp-guardMISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement6.1 Medium
- watchguard fireware osFireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets8.7 High
litellmPyPILiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`8.1 High- mozilla firefox, thunderbird +1 moreOther issue in the SVG component8.8 High
- project-monai monaiMONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)9.3 Critical
- dcmjs-org dcmjsdcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS9.1 Critical
- nodemailerNodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing8.3 High
- nodemailerNodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments8.3 High
- apple ipados, macos, visionos +3 more +5 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple macosA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...8.2 High
- apple macosAn authentication issue was addressed with improved validation of user attributes. This issue is...7.8 High
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS...6.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and...5.5 Medium
- xpdfInfinite loop in Xpdf due to missing validation in JPEG 2000 decoder2.1 Low
- vllmvLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE8.1 High
- zip-rs zip2zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE10.0 Critical
- misp misp-guardMISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding7.1 High
- misp misp-guardMISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules7.7 High
- ndemic creations plague inc evolvedNdemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization5.3 Medium
- stellarwp givewpGiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency5.3 Medium
- steelraven7 ravenfieldSteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization5.3 Medium
- vllmvLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders8.2 High
- vllmvLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate8.2 High
- vllmvLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids8.2 High
- Show moreLoading…