← Back
CWE-20

13,737 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,737)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-22772
1Hitron
1Lguvr 8h Firmware
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22771
1Hitron
1Lguvr 4h Firmware
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22770
1Hitron
1Hvr 16781 Firmware
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22769
1Hitron
1Hvr 8781 Firmware
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22768
1Hitron
1Hvr 4781 Firmware
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-23678
1Splunk
1Splunk
Jun 17, 2026
Jan 22, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition...Show more
In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition on the machine. This vulnerability only affects Splunk Enterprise for Windows.Show less
CVE-2024-23676
1Splunk
2Cloud
Splunk
Jun 17, 2026
Jan 22, 2024
N/A· v4
3.5 LOW· v3
N/A· v2
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-p...Show more
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.Show less
CVE-2023-47141
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270264.
CVE-2023-47747
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force...Show more
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.Show less
CVE-2023-47158
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-For...Show more
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270750.Show less
CVE-2023-50308
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service when a statement is run on columnar tables...Show more
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service when a statement is run on columnar tables. IBM X-Force ID: 273393.Show less
CVE-2023-47746
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.Show less
CVE-2023-45193
1Ibm
1Db2
Jun 17, 2026
Jan 22, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 268759.
CVE-2023-50694
1Dom96
1Httpbeast
Jun 17, 2026
Jan 19, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component.
CVE-2023-42766
1Intel
2Nuc 8 Compute Element Cm8v5cb Firmware
Nuc 8 Compute Element Cm8v7cb Firmware
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-38587
1Intel
13Nuc 8 Enthusiast Nuc8i7behga Firmware
Nuc 8 Enthusiast Nuc8i7bekqa FirmwareNuc 8 Home Nuc8i3behfa Firmware+10 more
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-29495
1Intel
2Nuc 8 Mainstream G Kit Nuc8i5inh Firmware
Nuc 8 Mainstream G Kit Nuc8i7inh Firmware
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-28743
1Intel
4Nuc 9 Pro Compute Element Nuc9v7qnb Firmware
Nuc 9 Pro Kit Nuc9v7qnb FirmwareNuc 9 Pro Kit Nuc9v7qnx Firmware+1 more
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-28738
1Intel
6Nuc 7 Essential Nuc7cjysamn Firmware
Nuc Kit Nuc7cjyh FirmwareNuc Kit Nuc7cjyhn Firmware+3 more
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-48354
1Google
1Android
Jun 17, 2026
Jan 18, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execution privileges needed