Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,961)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-2536 1Rankmath 1Seo Jun 17, 2026 Apr 9, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization an...Show more The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-2513 1Ninjateam 1Wp Chat App Jun 17, 2026 Apr 9, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageAlt' block attribute in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping...Show more The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageAlt' block attribute in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-2226 1Themeisle 1Otter Blocks Jun 17, 2026 Apr 9, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the google-map block in all versions up to, and inclu...Show more The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the google-map block in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-2165 1Seopress 1Seopress Jun 17, 2026 Apr 9, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output esc...Show more The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-2027 1Devowl 1Real Media Library Jun 17, 2026 Apr 9, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient inpu...Show more The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-25116 - - Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the `CF.RESERVE` command to trigger a runtime assertion and te...Show more RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the `CF.RESERVE` command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7 and 2.6.10.Show less
CVE-2024-31867 1Apache 1Zeppelin Jun 17, 2026 Apr 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter. This issue affects Apache Zeppelin: from 0.8.2...Show more Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.Show less
CVE-2024-28897 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26253 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows rndismp6.sys Remote Code Execution Vulnerability
CVE-2024-26240 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26189 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-20670 1Microsoft 1Outlook Jun 17, 2026 Apr 9, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Outlook for Windows Spoofing Vulnerability
CVE-2024-31865 1Apache 1Zeppelin Jun 17, 2026 Apr 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper Input Validation vulnerability in Apache Zeppelin. The attackers can call updating cron API with invalid or improper privileges so that the notebook can run with the privileges. This issue affects Apache Zeppe...Show more Improper Input Validation vulnerability in Apache Zeppelin. The attackers can call updating cron API with invalid or improper privileges so that the notebook can run with the privileges. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.Show less
CVE-2024-31862 1Apache 1Zeppelin Jun 17, 2026 Apr 9, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, w...Show more Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.Show less
CVE-2022-47894 1Apache 1Zeppelin Jun 17, 2026 Apr 9, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Use...Show more Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. For more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
CVE-2024-27896 1Huawei 2Emui Harmonyos Jun 17, 2026 Apr 8, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.
CVE-2023-52385 1Huawei 2Emui Harmonyos Jun 17, 2026 Apr 8, 2024 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52552 1Huawei 2Emui Harmonyos Jun 17, 2026 Apr 8, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52535 1Google 1Android Jun 17, 2026 Apr 8, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
CVE-2024-27912 - - Jun 17, 2026 Apr 5, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device to crash by sending crafted LPD packets.

Previous 1...123124125...649 Next