Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,949)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-22888 1Apache 1Airflow Jun 17, 2026 Jul 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an...Show more Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affectedShow less
CVE-2023-36872 1Microsoft 1Vp9 Video Extensions Jun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 VP9 Video Extensions Information Disclosure Vulnerability
CVE-2023-35367 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35366 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35365 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35336 1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 more Jun 17, 2026 Jul 11, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-35306 1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 more Jun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-35303 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 USB Audio Class System Driver Remote Code Execution Vulnerability
CVE-2023-32057 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-32037 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jun 17, 2026 Jul 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
CVE-2022-31810 1Siemens 1Sipass Integrated Jun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-bas...Show more A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition.Show less
CVE-2022-29562 1Siemens 11Ruggedcom Rox Mx5000 Firmware Ruggedcom Rox Mx5000re FirmwareRuggedcom Rox Rx1400 Firmware+8 more Jun 17, 2026 Jul 11, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V...Show more A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). Affected devices do not properly handle malformed HTTP packets. This could allow an unauthenticated remote attacker to send a malformed HTTP packet causing certain functions to fail in a controlled manner.Show less
CVE-2023-22835 1Palantir 2Foundry Frontend Foundry Issues Jun 17, 2026 Jul 10, 2023 N/A· v4 7.7 HIGH· v3 N/A· v2 A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants....Show more A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.Show less
CVE-2023-30449 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439.
CVE-2023-30448 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437.
CVE-2023-30447 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436.
CVE-2023-30446 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361 .
CVE-2023-30445 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357.
CVE-2023-30442 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options....Show more IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202.Show less
CVE-2023-28955 1Ibm 1Watson Knowledge Catalog On Cloud Pak For Data Jun 17, 2026 Jul 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted request that could cause a denial of service. IBM X-Force ID: 251704.

Previous 1...152153154...648 Next