CWE-20
13,737 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVEs (13,737)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Intel 9Nuc X15 Laptop Kit Lapac71g Firmware Nuc X15 Laptop Kit Lapac71h FirmwareNuc X15 Laptop Kit Lapbc510 Firmware+6 moreJun 17, 2026 Aug 14, 2024 8.7 HIGH· v4 8.2 HIGH· v3 N/A· v2 Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access. |
1Intel 1Server Board S2600st Firmware Jun 17, 2026 Aug 14, 2024 7.1 HIGH· v4 8.2 HIGH· v3 N/A· v2 Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access. |
1Intel 2Distribution For Gdb Oneapi Base ToolkitJun 17, 2026 Aug 14, 2024 1.0 LOW· v4 3.3 LOW· v3 N/A· v2 Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. |
Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via...Show more |
Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local access. |
1Dell 41Embedded Box Pc 5000 Firmware Latitude 12 Rugged Extreme 7214 FirmwareLatitude 13 3380 Firmware+38 moreJun 17, 2026 Aug 14, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. |
Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE. |
Azure Stack Hub Elevation of Privilege Vulnerability |
1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability |
1Microsoft 4365 Apps Office 2019Office Long Term Servicing Channel+1 moreJun 17, 2026 Aug 13, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Project Remote Code Execution Vulnerability |
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service. |
3Amd ArmTrustedfirmware3Trusted Firmware A Trusted Firmware ATrusted Firmware AJun 17, 2026 Aug 13, 2024 N/A· v4 5.8 MEDIUM· v3 N/A· v2 Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. |
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resul...Show more |
1Siemens 26Ruggedcom Rm1224 Lte(4g) Eu Firmware Ruggedcom Rm1224 Lte(4g) Nam FirmwareScalance M804pb Firmware+23 moreJun 17, 2026 Aug 13, 2024 8.6 HIGH· v4 8.8 HIGH· v3 N/A· v2 A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2)...Show more |
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute...Show more |
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue administrator could inject malicious code. The Concrete CMS security team gave this vulnerability a CVSS 4....Show more |
File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2. Users are recommen...Show more |
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade...Show more |
1Dieboldnixdorf 1Vynamic Security Suite Jun 17, 2026 Aug 8, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. Th...Show more |
The Brizy – Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing or incorrect nonce validation on form submissions. This makes...Show more |