Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-2053 1Mcafee 1Mcafee Agent May 6, 2026 Feb 23, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web pag...Show more The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability.Show less
CVE-2015-0624 1Cisco 3Content Security Management Appliance Email Security Appliance FirmwareWeb Security Appliance May 6, 2026 Feb 21, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP...Show more The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.Show less
CVE-2015-0879 1Almail 1Al Mail32 May 6, 2026 Feb 20, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
CVE-2015-0584 1Cisco 1Desktop Collaboration Experience Dx650 May 6, 2026 Feb 20, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka B...Show more The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947.Show less
CVE-2015-1604 1Adminsystems Cms Project 1Adminsystems Cms May 6, 2026 Feb 19, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing...Show more Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/files/.Show less
CVE-2012-6687 1Fastcgi 1Fcgi May 6, 2026 Feb 19, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.
CVE-2015-0626 1Cisco 1Hosted Collaboration Solution May 6, 2026 Feb 19, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114.
CVE-2015-0622 1Cisco 1Wireless Lan Controller May 6, 2026 Feb 19, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handle...Show more The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861.Show less
CVE-2015-0620 1Cisco 1Telepresence Management Suite May 6, 2026 Feb 18, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug...Show more The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.Show less
CVE-2015-0268 1Xen 1Xen May 6, 2026 Feb 16, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writin...Show more The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register.Show less
CVE-2015-0606 1Cisco 1Ios May 6, 2026 Feb 12, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696.
CVE-2014-2147 1Cisco 1Prime Infrastructure May 6, 2026 Feb 12, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks...Show more The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuj42444.Show less
CVE-2015-0600 1Cisco 1Unified Ip Phones 9900 Series Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via crafted packets, aka Bug ID CSCuq12139.
CVE-2015-0589 1Cisco 1Webex Meetings Server May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.
CVE-2015-0604 1Cisco 2Unified Ip Phones 9951 Firmware Unified Ip Phones 9971 Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.
CVE-2015-0601 1Cisco 2Unified Ip Phones 9951 Firmware Unified Ip Phones 9971 Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.
CVE-2014-8013 1Cisco 1Nx Os May 6, 2026 Feb 3, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service (device reload) via a long CLI command, aka Bug ID CSCur54182.
CVE-2015-1382 3Debian OpensusePrivoxy 3Debian Linux OpensusePrivoxy May 6, 2026 Feb 3, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header.
CVE-2015-1380 3Opensuse OraclePrivoxy 3Opensuse PrivoxySolaris May 6, 2026 Feb 3, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.
CVE-2015-1049 1Siemens 1Scalance X 200 Series Firmware May 6, 2026 Feb 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.

Previous 1...529530531...687 Next