← Back
CWE-20

12,949 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,949)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Aug 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.
1Apache
1Apache Airflow Providers Apache Drill
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters w...Show more
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection with DrillHook giving an opportunity to read files on the Airflow server. This issue affects Apache Airflow Drill Provider: before 2.4.3. It is recommended to upgrade to a version that is not affected.Show less
1Intel
71Compute Element Stk2mv64cc Firmware
Nuc Board Nuc7i3bnb FirmwareNuc Board Nuc7i3bnh Firmware+68 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
23Compute Stick Stk2mv64cc Firmware
Nuc 7 Enthusiast Nuc7i7bnhxg FirmwareNuc 7 Enthusiast Nuc7i7bnkq Firmware+20 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
24Nuc 11 Pro Board Nuc11tnbi30z Firmware
Nuc 11 Pro Board Nuc11tnbi3 FirmwareNuc 11 Pro Board Nuc11tnbi50z Firmware+21 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Easy Streaming Wizard
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
155Nuc 11 Compute Element Cm11ebc4w Firmware
Nuc 11 Compute Element Cm11ebi38w FirmwareNuc 11 Compute Element Cm11ebi58w Firmware+152 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
298Atom X6200fe Firmware
Atom X6211e FirmwareAtom X6212re Firmware+295 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
8.0 HIGH· v3
N/A· v2
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
1Intel
1Converged Security Management Engine Firmware
Jun 17, 2026
Aug 11, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.
3Debian
FedoraprojectIntel
5Debian Linux
FedoraKiller+2 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
26Nuc 10 Performance Kit Nuc10i3fnh Firmware
Nuc 10 Performance Kit Nuc10i3fnhf FirmwareNuc 10 Performance Kit Nuc10i3fnhn Firmware+23 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Converged Security Management Engine Firmware
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthent...Show more
Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.Show less
3Debian
FedoraprojectIntel
5Debian Linux
FedoraKiller+2 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
1Intel
1Pcsd Bios
Jun 17, 2026
Aug 11, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access.
1Ivanti
1Avalanche
Jun 17, 2026
Aug 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fix...Show more
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.Show less
1Apache
1Traffic Server
Jun 17, 2026
Aug 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.
1Zoom
1Zoom
Jun 17, 2026
Aug 8, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access.
1Microsoft
1.net Framework
Aug 10, 2026
Aug 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
ASP.NET Elevation of Privilege Vulnerability
1Microsoft
1.net Framework
Aug 10, 2026
Aug 8, 2023
N/A· v4
5.9 MEDIUM· v3
N/A· v2
.NET Framework Spoofing Vulnerability
1Fasterxml
1Jackson Dataformats Text
Jun 17, 2026
Aug 8, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to cras...Show more
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack. Show less