Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,949)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28304 1Microsoft 2Odbc Ole Db Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-28302 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 20h2+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-28301 1Microsoft 1Edge Jun 17, 2026 Apr 11, 2023 N/A· v4 3.7 LOW· v3 N/A· v2 Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2023-28291 1Microsoft 1Raw Image Extension Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28274 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-24893 1Microsoft 1Visual Studio Code Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Visual Studio Code Remote Code Execution Vulnerability
CVE-2023-23375 1Microsoft 2Odbc Ole Db Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-21554 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 20h2+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2022-42477 1Fortinet 1Fortianalyzer Jun 17, 2026 Apr 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom d...Show more An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.Show less
CVE-2023-26293 1Siemens 1Tia Portal Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automat...Show more A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.Show less
CVE-2023-26070 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
CVE-2023-26069 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
CVE-2023-26068 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
CVE-2023-26067 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
CVE-2023-30450 1Redpanda 1Redpanda Jun 17, 2026 Apr 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must re...Show more rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches.Show less
CVE-2023-28710 1Apache 1Apache Airflow Providers Apache Spark Jun 17, 2026 Apr 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.
CVE-2023-28707 1Apache 1Apache Airflow Providers Apache Drill Jun 17, 2026 Apr 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.
CVE-2023-20103 1Cisco 1Secure Network Analytics Jun 17, 2026 Apr 5, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user...Show more A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker could exploit this vulnerability by uploading a crafted file to an affected device. A successful exploit could allow the attacker to execute code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.Show less
CVE-2023-20134 1Cisco 1Webex Meetings Jun 17, 2026 Apr 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more...Show more Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20132 1Cisco 1Webex Meetings Jun 17, 2026 Apr 5, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more...Show more Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory.Show less

Previous 1...163164165...648 Next