← Back
CWE-20

13,740 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,740)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-4544
2Canonical
Qemu
2Qemu
Ubuntu Linux
May 6, 2026
May 8, 2014
N/A· v4
N/A· v3
4.9 MEDIUM· v2
hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indic...Show more
hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information.Show less
CVE-2014-0684
1Cisco
5Nexus 7000
Nexus 7000 10 SlotNexus 7000 18 Slot+2 more
May 6, 2026
May 7, 2014
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.
CVE-2013-6444
1Pywbem Project
1Pywbem
May 6, 2026
May 5, 2014
N/A· v4
N/A· v3
5.8 MEDIUM· v2
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof...Show more
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Show less
CVE-2013-6418
1Pywbem Project
1Pywbem
May 6, 2026
May 5, 2014
N/A· v4
N/A· v3
5.8 MEDIUM· v2
PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.
CVE-2014-2175
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.
CVE-2014-2169
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
9.0 HIGH· v2
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bu...Show more
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.Show less
CVE-2014-2167
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.
CVE-2014-2166
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.
CVE-2014-2165
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.
CVE-2014-2164
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.
CVE-2014-2163
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.
CVE-2014-2162
1Cisco
2Telepresence Tc Software
Telepresence Te Software
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.
CVE-2014-2161
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
CVE-2014-2160
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
CVE-2014-2159
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.
CVE-2014-2158
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
CVE-2014-2157
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
CVE-2014-2156
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
CVE-2013-7110
1Transifex
1Transifex
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this...Show more
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.Show less
CVE-2013-2073
1Transifex
1Transifex
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.