Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,737)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0658 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.
CVE-2013-6334 1Ibm 4Atlas Ediscovery Process Management Atlas SuiteDisposal And Governance Management For It+1 more Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 6.4 MEDIUM· v2 IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and...Show more IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) do not properly validate sessions, which allows remote attackers to bypass intended access restrictions, and visit PolicyAtlas/ResponseDraftServlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors.Show less
CVE-2013-4353 1Openssl 1Openssl Apr 29, 2026 Jan 9, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation r...Show more The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.Show less
CVE-2014-0656 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353.
CVE-2014-0655 1Cisco 1Adaptive Security Appliance Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorizatio...Show more The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.Show less
CVE-2014-0654 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.
CVE-2014-0653 1Cisco 1Adaptive Security Appliance Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID...Show more The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.Show less
CVE-2013-6982 1Cisco 1Nx Os Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a...Show more The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.Show less
CVE-2011-1780 1Xen 1Xen Apr 29, 2026 Jan 7, 2014 N/A· v4 N/A· v3 6.1 MEDIUM· v2 The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread with a different instruction in a differ...Show more The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread.Show less
CVE-2011-1166 1Xen 1Xen Apr 29, 2026 Jan 7, 2014 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.
CVE-2013-7271 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain se...Show more The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7270 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to o...Show more The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7269 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obta...Show more The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7268 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain se...Show more The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7267 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obta...Show more The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7266 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local...Show more The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7265 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain...Show more The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7264 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obta...Show more The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.Show less
CVE-2013-7263 1Linux 1Linux Kernel Apr 29, 2026 Jan 6, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a...Show more The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.Show less
CVE-2013-7255 1Opsview 1Opsview Apr 29, 2026 Jan 3, 2014 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Previous 1...557558559...687 Next