Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-0252 3Apache DebianFedoraproject 3Debian Linux FedoraXerces C++ May 6, 2026 Mar 24, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
CVE-2015-0137 1Ibm 1Powervc May 6, 2026 Mar 24, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via...Show more IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.Show less
CVE-2015-0669 1Cisco 1Ios May 6, 2026 Mar 21, 2015 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending craft...Show more The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending crafted Autonomic Networking (AN) messages on an intranet network, aka Bug ID CSCup62167.Show less
CVE-2015-1787 1Openssl 1Openssl May 6, 2026 Mar 19, 2015 N/A· v4 N/A· v3 2.6 LOW· v2 The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of serv...Show more The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.Show less
CVE-2015-0293 1Openssl 1Openssl May 6, 2026 Mar 19, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via...Show more The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.Show less
CVE-2015-0664 1Cisco 1Anyconnect Secure Mobility Client May 6, 2026 Mar 18, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID C...Show more The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.Show less
CVE-2015-0980 1Scadaengine 1Bacnet Opc Server May 6, 2026 Mar 14, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.
CVE-2015-1782 3Debian FedoraprojectLibssh2 3Debian Linux FedoraLibssh2 May 6, 2026 Mar 13, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
CVE-2015-0652 1Cisco 3Expressway Software Telepresence ConductorTelepresence Video Communication Server Software May 6, 2026 Mar 13, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause...Show more The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.Show less
CVE-2015-0523 1Emc 2Rsa Certificate Manager Rsa Registration Manager May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message...Show more EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.Show less
CVE-2015-2187 2Opensuse Wireshark 2Opensuse Wireshark May 6, 2026 Mar 8, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remot...Show more The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service (stack memory corruption and application crash) via a crafted packet.Show less
CVE-2015-0228 4Apache AppleCanonical+1 more 5Http Server Mac Os XMac Os X Server+2 more May 6, 2026 Mar 8, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Pi...Show more The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.Show less
CVE-2015-2177 1Siemens 2Simatic S7 300 Cpu Simatic S7 300 Cpu Firmware Jun 2, 2026 Mar 7, 2015 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
CVE-2014-9369 1Siemens 3Spc4000 Firmware Spc5000 FirmwareSpc6000 Firmware May 6, 2026 Mar 7, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service (device restart) via crafted packets.
CVE-2015-1483 1Symantec 1Netbackup Opscenter May 6, 2026 Mar 6, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors.
CVE-2015-0661 1Cisco 1Ios Xr May 6, 2026 Mar 6, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet, aka Bug ID CSCur25858.
CVE-2015-0657 1Cisco 1Ios Xr May 6, 2026 Mar 6, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192.
CVE-2014-8160 6Canonical DebianLinux+3 more 15Debian Linux Enterprise Linux DesktopEnterprise Linux Server+12 more May 6, 2026 Mar 2, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows...Show more net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.Show less
CVE-2015-0633 1Cisco 1Unified Computing System May 6, 2026 Feb 26, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response p...Show more The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.Show less
CVE-2015-2055 1Zhone Technologies 1Gpon 2520 Firmware May 6, 2026 Feb 23, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.

Previous 1...528529530...687 Next