← Back
CWE-20

12,815 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,815)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nowsms
1Now Sms & Mms Gateway
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection.
1Drupal
1Drupal
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id...Show more
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array acces...Show more
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.Show less
1Apache
2Mod Dav Svn
Subversion
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allo...Show more
The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.Show less
1Google
1Chrome
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a mod...Show more
The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.Show less
1Rubyonrails
2Rails
Ruby On Rails
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an inv...Show more
actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.Show less
1Cybozu
1Garoon
Apr 29, 2026
Dec 5, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors.
1Elecsyscorp
2Director Dnp3 Outstation Kernel
Director Industrial Communication Gateway
Apr 29, 2026
Dec 4, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and communication outage) via c...Show more
The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and communication outage) via crafted input.Show less
1Cisco
2Ons 15454
Ons 15454 Firmware
Apr 29, 2026
Dec 4, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of service (card reset) via crafted packets, aka Bug ID CSCtz50902.
1Cisco
2Ios
Ios Xe
Apr 29, 2026
Dec 3, 2013
N/A· v4
N/A· v3
6.1 MEDIUM· v2
The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device reload) via a crafted sequence of ARP packets, aka Bug ID CSCuh38133.
1Cisco
1Ons 15454
Apr 29, 2026
Dec 3, 2013
N/A· v4
N/A· v3
7.1 HIGH· v2
The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2) SSLv3 packets, aka Bug ID CSCuh34787.
2Canonical
Samba
2Samba
Ubuntu Linux
Apr 29, 2026
Dec 3, 2013
N/A· v4
N/A· v3
3.6 LOW· v2
The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authentica...Show more
The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.Show less
1Cisco
2Adaptive Security Appliance
Adaptive Security Appliance Software
Apr 29, 2026
Dec 2, 2013
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service (device reload) via a malformed response...Show more
Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service (device reload) via a malformed response, aka Bug ID CSCuj28861.Show less
1Novell
1Open Enterprise Server
Apr 29, 2026
Dec 1, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the...Show more
The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of service (service crash) by establishing many TCP connections to port 8009.Show less
1Alstom
1E Terracontrol
Apr 29, 2026
Dec 1, 2013
N/A· v4
N/A· v3
4.7 MEDIUM· v2
The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service (infinite loop and DNP3 service disruption) via crafted input over a serial line.
1Cisco
1Ios Xe
Apr 29, 2026
Nov 29, 2013
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS packets that are not properly handled during IP header validation, aka...Show more
The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992.Show less