Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-1334 1Cisco 1Small Business Wireless Access Points Firmware May 6, 2026 Feb 17, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457.
CVE-2016-1153 1Cybozu 1Office May 6, 2026 Feb 17, 2016 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489.
CVE-2015-8489 1Cybozu 1Office May 6, 2026 Feb 17, 2016 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
CVE-2015-5042 1Ibm 1Emptoris Contract Management May 6, 2026 Feb 15, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary...Show more IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file.Show less
CVE-2016-0950 1Adobe 1Connect May 6, 2026 Feb 10, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors.
CVE-2016-0050 1Microsoft 2Windows Server 2008 Windows Server 2012 May 6, 2026 Feb 10, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage...Show more Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."Show less
CVE-2016-0046 1Microsoft 3Windows 10 Windows 8.1Windows Server 2012 May 6, 2026 Feb 10, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted Reader file, aka "Microsoft Windows Reader Vulnerability."
CVE-2016-0044 1Microsoft 3Windows 8.1 Windows Rt 8.1Windows Server 2012 May 6, 2026 Feb 10, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service outage) via crafted "change batch" data, aka "Windows DLL Loa...Show more Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service outage) via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."Show less
CVE-2016-0037 1Microsoft 1Windows Server 2012 May 6, 2026 Feb 10, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service (daemon outage) via crafted data,...Show more The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service (daemon outage) via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service Vulnerability."Show less
CVE-2016-2089 1Jasper Project 1Jasper May 6, 2026 Feb 8, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
CVE-2015-8360 1Atlassian 1Bamboo May 6, 2026 Feb 8, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port.
CVE-2014-9757 1Atlassian 1Bamboo May 6, 2026 Feb 8, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via serialized data in an XMPP message.
CVE-2016-2201 1Siemens 1Simatic S7 1500 Cpu Firmware May 6, 2026 Feb 8, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.
CVE-2016-2200 1Siemens 1Simatic S7 1500 Cpu Firmware May 6, 2026 Feb 8, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.
CVE-2016-0802 2Apple Google 5Android Iphone OsMac Os X+2 more May 6, 2026 Feb 7, 2016 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v...Show more The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181.Show less
CVE-2016-0801 2Apple Google 5Android Iphone OsMac Os X+2 more May 6, 2026 Feb 7, 2016 N/A· v4 9.8 CRITICAL· v3 8.3 HIGH· v2 The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v...Show more The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029.Show less
CVE-2016-1284 1Isc 1Bind May 6, 2026 Feb 4, 2016 N/A· v4 5.9 MEDIUM· v3 2.6 LOW· v2 rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted...Show more rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.Show less
CVE-2015-8747 1Radicale 1Radicale May 6, 2026 Feb 3, 2016 N/A· v4 10.0 CRITICAL· v3 7.5 HIGH· v2 The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
CVE-2015-8265 1Huawei 2E5151 Firmware E5186 Firmware May 6, 2026 Feb 1, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it...Show more Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.Show less
CVE-2016-1942 2Mozilla Opensuse 3Firefox LeapOpensuse May 6, 2026 Jan 31, 2016 N/A· v4 7.4 HIGH· v3 4.3 MEDIUM· v2 Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.

Previous 1...508509510...687 Next