Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,737)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-30952 1Palantir 1Foundry Jun 17, 2026 Aug 3, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
CVE-2023-37559 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internall...Show more After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558Show less
CVE-2023-37558 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internall...Show more After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559Show less
CVE-2023-37556 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally...Show more In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555. Show less
CVE-2023-37555 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally...Show more In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37556. Show less
CVE-2023-37554 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally...Show more In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37555 and CVE-2023-37556. Show less
CVE-2023-37553 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally...Show more In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556. Show less
CVE-2023-37552 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally...Show more In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37553, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556. Show less
CVE-2023-37550 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37549. Show less
CVE-2023-37549 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37550 Show less
CVE-2023-37548 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37549 and CVE-2023-37550 Show less
CVE-2023-37547 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550 Show less
CVE-2023-37546 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550 Show less
CVE-2023-37545 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr...Show more In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37546, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549, CVE-2023-37550 Show less
CVE-2022-4925 1Google 1Chrome Jun 17, 2026 Jul 29, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious network traffic. (Chromium security severity: Low)
CVE-2022-4911 1Google 1Chrome Jun 17, 2026 Jul 29, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2023-38495 1Cncf 1Crossplane Jun 17, 2026 Jul 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crosspl...Show more Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crossplane does not detect if an attacker has tampered with a Package. The problem has been fixed in 1.11.5, 1.12.3 and 1.13.0. As a workaround, only use images from trusted sources and keep Package editing/creating privileges to administrators only.Show less
CVE-2022-43713 1Gxsoftware 1Xperiencentral Jun 17, 2026 Jul 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data input because form validation could be bypassed.
CVE-2023-28130 1Checkpoint 1Gaia Portal Jun 17, 2026 Jul 26, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 Local user may lead to privilege escalation using Gaia Portal hostnames page.
CVE-2022-2502 1Hitachienergy 1Rtu500 Firmware Jun 17, 2026 Jul 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 623...Show more A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature ‘Advanced security’ which must be ordered separately. If these preconditions are fulfilled, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a missing input data validation which eventually if exploited causes an internal buffer to overflow in the HCI IEC 60870-5-104 function.Show less

Previous 1...189190191...687 Next