Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,815)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-5168 1Apple 1Mac Os X Apr 29, 2026 Oct 24, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL.
CVE-2013-4390 1Apache 2Sling Sling Auth Core Component Apr 29, 2026 Oct 24, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and...Show more Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."Show less
CVE-2013-4373 1Redhat 1Jboss Operations Network Apr 29, 2026 Oct 24, 2013 N/A· v4 N/A· v3 3.2 LOW· v2 The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to u...Show more The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.Show less
CVE-2013-5550 1Cisco 1Unified Computing System Apr 29, 2026 Oct 22, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger hardware-component write operations, aka Bug ID CSCtq8...Show more The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger hardware-component write operations, aka Bug ID CSCtq86549.Show less
CVE-2013-4450 1Nodejs 1Node.js Apr 29, 2026 Oct 21, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading t...Show more The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.Show less
CVE-2013-5970 1Vmware 2Esx Esxi Apr 29, 2026 Oct 21, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic.
CVE-2012-4117 1Cisco 1Unified Computing System Apr 29, 2026 Oct 19, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-the-middle attackers to watch SSL KVM video-channel traffic or modify this traffi...Show more The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-the-middle attackers to watch SSL KVM video-channel traffic or modify this traffic via a crafted certificate, aka Bug ID CSCtr73033.Show less
CVE-2013-6170 1Juniper 1Junos Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a d...Show more Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests.Show less
CVE-2013-6015 1Juniper 1Junos Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows re...Show more Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service (flow daemon crash) via an unspecified sequence of TCP packets.Show less
CVE-2013-0500 1Ibm 2Storwize V7000 Unified Storwize V7000 Unified Software Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obta...Show more IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation.Show less
CVE-2013-5539 1Cisco 2Identity Services Engine Identity Services Engine Software Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems,...Show more The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.Show less
CVE-2013-5529 1Cisco 1Webex Meetings Server Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via...Show more The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200.Show less
CVE-2013-5394 1Ibm 1Websphere Extreme Scale Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
CVE-2012-4099 1Cisco 1Nx Os Apr 29, 2026 Oct 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13065.
CVE-2012-4097 1Cisco 1Nx Os Apr 29, 2026 Oct 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message, aka Bug ID CSCtn130...Show more The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message, aka Bug ID CSCtn13043.Show less
CVE-2012-4076 1Cisco 1Nx Os Apr 29, 2026 Oct 14, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.
CVE-2013-5508 1Cisco 2Adaptive Security Appliance Software Firewall Services Module Software Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 The SQLNet inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8...Show more The SQLNet inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.6), 9.0.x before 9.0(2.10), and 9.1.x before 9.1(2) and Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(27) and 4.x before 4.1(14) allows remote attackers to cause a denial of service (device reload) via crafted segmented Transparent Network Substrate (TNS) packets, aka Bug ID CSCub98434.Show less
CVE-2013-2787 1Alstom 1E Terracontrol Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets.
CVE-2012-4105 1Cisco 1Unified Computing System Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) via crafted "debug hardware" parameters, aka Bug ID CSCtq86468.
CVE-2013-4255 2Condor Project Redhat 2Condor Enterprise Mrg Apr 29, 2026 Oct 11, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, U...Show more The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.Show less

Previous 1...518519520...641 Next