CWE-20
13,737 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVEs (13,737)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control...Show more |
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control...Show more |
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2. |
JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning. |
1Amd 86Epyc 7203 Firmware Epyc 7203p FirmwareEpyc 72f3 Firmware+83 moreJun 17, 2026 Aug 5, 2024 N/A· v4 7.9 HIGH· v3 N/A· v2 Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. |
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCB...Show more |
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `H...Show more |
1Siemens 1Omnivise T3000 Application Server Jun 17, 2026 Aug 2, 2024 8.7 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). The affected system exposes the port of an int...Show more |
server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369. |
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue admi...Show more |
Improper Input Validation of query search results for private field data in PingIDM (Query Filter module) allows for a potentially efficient brute forcing approach leading to information disclosure. |
A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges. |
A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot. |
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28. |
Remote Code Execution in Cato Windows SDP client via crafted URLs.
This issue affects Windows SDP Client before 5.10.34. |
The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this al...Show more |
1Dahuasecurity 58Ipc Hfs8449g Z7 Led Firmware Ipc Hfs8849g Z3 Led FirmwareNvr4104 4ks2/l Firmware+55 moreJun 17, 2026 Jul 31, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization. |
1Dahuasecurity 56Nvr4104 4ks2/l Firmware Nvr4104 4ks3 FirmwareNvr4104 P 4ks2/l Firmware+53 moreJun 17, 2026 Jul 31, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. |
1Dahuasecurity 56Nvr4104 4ks2/l Firmware Nvr4104 4ks3 FirmwareNvr4104 P 4ks2/l Firmware+53 moreJun 17, 2026 Jul 31, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. |
1Dahuasecurity 58Ipc Hfs8449g Z7 Led Firmware Ipc Hfs8849g Z3 Led FirmwareNvr4104 4ks2/l Firmware+55 moreJun 17, 2026 Jul 31, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been found in Dahua products.Attackers
can send carefully crafted data packets to the interface with vulnerabilities,
causing the device to crash. |