← Back
CWE-20

12,710 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,710)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1532
1Perlbal
1Perlbal
Apr 23, 2026
Mar 28, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.
CVE-2008-1495
1Peel
1Peel
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an...Show more
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.Show less
CVE-2008-1492
1Coronamatrix
1Phpaddressbook
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) insta...Show more
Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php. NOTE: it was later reported that vector 1 is also present in 2.0.Show less
CVE-2008-1478
1Ari Pikivirta
1Home Ftp Server
Apr 23, 2026
Mar 24, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from thi...Show more
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-1412
1F Secure
12F Secure Anti Virus
F Secure Anti Virus Client SecurityF Secure Anti Virus For Linux+9 more
Apr 23, 2026
Mar 20, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a de...Show more
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.Show less
CVE-2008-1411
1Acronis
1Snap Deploy
Apr 23, 2026
Mar 20, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service (crash) via an incomplete TFTP request, which triggers a NULL pointer dereference.
CVE-2008-1012
1Apple
1Apple Airport Extreme Base Station
Apr 23, 2026
Mar 20, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to "input validation."
CVE-2008-0999
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Mar 18, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference.
CVE-2008-0054
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Mar 18, 2008
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the NSSelectorFromString API, which causes an "unexpected selector" to be used.
CVE-2008-1366
1Trend Micro
1Officescan Corporate Edition
Apr 23, 2026
Mar 17, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request with...Show more
Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request without a Content-Length header or (2) invalid characters in unspecified CGI arguments, which triggers a NULL pointer dereference.Show less
CVE-2008-1337
1Netopia
1Timbuktu Pro
Apr 23, 2026
Mar 14, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consum...Show more
The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message.Show less
CVE-2008-1157
1Cisco
1Ciscoworks Internetwork Performance Monitor
Apr 23, 2026
Mar 14, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.
CVE-2008-1118
1Netopia
1Timbuktu Pro
Apr 23, 2026
Mar 14, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted...Show more
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.Show less
CVE-2008-1311
1Packettrap
1Pt360 Tool Suite Pro
Apr 23, 2026
Mar 12, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>"...Show more
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.Show less
CVE-2008-1303
1Perforce
1Perforce Server
Apr 23, 2026
Mar 12, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-Re...Show more
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.Show less
CVE-2008-0116
1Microsoft
4Excel
Excel ViewerOffice+1 more
Apr 23, 2026
Mar 11, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Ric...Show more
Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."Show less
CVE-2008-1280
1Acronis
2True Image
True Image Windows Agent
Apr 23, 2026
Mar 10, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a mal...Show more
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.Show less
CVE-2008-1279
1Acronis
1True Image
Apr 23, 2026
Mar 10, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a pa...Show more
Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.Show less
CVE-2008-1278
1Remotelyanywhere
1Remotelyanywhere
Apr 23, 2026
Mar 10, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NUL...Show more
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted.Show less
CVE-2008-1277
1Mailenable
2Mailenable Enterprise
Mailenable Professional
Apr 23, 2026
Mar 10, 2008
N/A· v4
N/A· v3
9.0 HIGH· v2
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without requir...Show more
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.Show less