← Back
CWE-20

12,815 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,815)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2113
1Cisco
2Ios
Ios Xe
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) vi...Show more
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540.Show less
CVE-2014-2112
1Cisco
1Ios
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID CSCuf51357.
CVE-2014-2111
1Cisco
1Ios
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID...Show more
The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCue00996.Show less
CVE-2014-2109
1Cisco
1Ios
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets, aka Bug IDs...Show more
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494.Show less
CVE-2014-2108
1Cisco
2Ios
Ios Xe
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug...Show more
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.Show less
CVE-2014-2107
1Cisco
1Ios
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service (route switch processor outage) via cr...Show more
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service (route switch processor outage) via crafted IP packets, aka Bug ID CSCug84789.Show less
CVE-2014-2106
1Cisco
2Ios
Ios Xe
May 6, 2026
Mar 27, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCug45898.
CVE-2014-2653
1Openbsd
1Openssh
May 28, 2026
Mar 27, 2014
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
CVE-2014-1828
1Ithoughts
1Ithoughtshd
May 6, 2026
Mar 26, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption) by uploading a large file.
CVE-2014-1827
1Ithoughts
1Ithoughtshd
May 6, 2026
Mar 26, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .htm...Show more
The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.Show less
CVE-2014-0904
1Ibm
1Security Appscan
May 6, 2026
Mar 26, 2014
N/A· v4
N/A· v3
7.6 HIGH· v2
The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file.
CVE-2013-3997
1Ibm
1Infosphere Biginsights
May 6, 2026
Mar 26, 2014
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishi...Show more
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.Show less
CVE-2014-1492
1Mozilla
1Network Security Services
May 6, 2026
Mar 25, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalize...Show more
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.Show less
CVE-2014-0628
1Dell
1Bsafe Micro Edition Suite
May 6, 2026
Mar 25, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
CVE-2014-2284
1Net Snmp
1Net Snmp
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via uns...Show more
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.Show less
CVE-2014-2523
2Canonical
Linux
2Linux Kernel
Ubuntu Linux
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary c...Show more
net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.Show less
CVE-2014-2585
1Owncloud
1Owncloud Server
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
4.9 MEDIUM· v2
ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration.
CVE-2011-3195
1Gplhost
1Domain Technologie Control
May 6, 2026
Mar 21, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options.
CVE-2014-2122
1Cisco
1Hosted Collaboration Solution
May 6, 2026
Mar 19, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCub58999.
CVE-2014-2121
1Cisco
1Hosted Collaboration Solution
May 6, 2026
Mar 19, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CS...Show more
The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643.Show less