← Back
CWE-20

12,710 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,710)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2000-0258
1Microsoft
2Internet Information Server
Internet Information Services
Apr 16, 2026
Apr 12, 2000
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
CVE-1999-0001
3Bsdi
FreebsdOpenbsd
3Bsd Os
FreebsdOpenbsd
Apr 16, 2026
Dec 30, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
CVE-1999-0995
1Microsoft
1Windows Nt
Apr 16, 2026
Dec 16, 1999
N/A· v4
N/A· v3
7.8 HIGH· v2
Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVE-1999-1547
1Oracle
1Web Listener
Apr 16, 2026
Nov 25, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
CVE-1999-0999
1Microsoft
1Sql Server
Apr 16, 2026
Nov 19, 1999
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVE-1999-0867
1Microsoft
3Commercial Internet System
Internet Information ServerSite Server
Apr 16, 2026
Aug 11, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
CVE-1999-0721
1Microsoft
2Windows 2000
Windows Nt
Apr 16, 2026
Jul 20, 1999
N/A· v4
N/A· v3
7.8 HIGH· v2
Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
CVE-1999-0918
1Microsoft
4Windows 2000
Windows 95Windows 98+1 more
Apr 16, 2026
Jul 3, 1999
N/A· v4
N/A· v3
7.8 HIGH· v2
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
CVE-1999-0726
1Microsoft
2Windows 2000
Windows Nt
Apr 16, 2026
Jun 30, 1999
N/A· v4
N/A· v3
7.8 HIGH· v2
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
CVE-1999-0265
2Microware
Novell
2Netware
Os 9
Apr 16, 2026
Jan 1, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ICMP redirect messages may crash or lock up a host.