Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,815)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-2169 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bu...Show more Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.Show less
CVE-2014-2167 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.
CVE-2014-2166 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.
CVE-2014-2165 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.
CVE-2014-2164 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.
CVE-2014-2163 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.
CVE-2014-2162 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.
CVE-2014-2161 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
CVE-2014-2160 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
CVE-2014-2159 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.
CVE-2014-2158 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
CVE-2014-2157 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
CVE-2014-2156 1Cisco 13Tandberg 2000 Mxp Tandberg 550 MxpTandberg 770 Mxp+10 more May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
CVE-2013-7110 1Transifex 1Transifex May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this...Show more Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.Show less
CVE-2013-2073 1Transifex 1Transifex May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.
CVE-2014-0114 1Apache 2Commons Beanutils Struts May 6, 2026 Apr 30, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which...Show more Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.Show less
CVE-2013-7236 1Simplemachines 1Simple Machines Forum May 6, 2026 Apr 29, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
CVE-2013-7235 1Simplemachines 1Simple Machines Forum May 6, 2026 Apr 29, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
CVE-2013-7234 1Simplemachines 1Simple Machines Forum May 6, 2026 Apr 29, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
CVE-2014-2184 1Cisco 1Unified Communications Manager May 6, 2026 Apr 29, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.

Previous 1...500501502...641 Next