Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,947)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-33703 1Google 1Android Jun 17, 2026 Jul 12, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-33690 1Google 1Android Jun 17, 2026 Jul 12, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file.
CVE-2022-30756 1Google 1Android Jun 17, 2026 Jul 12, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
CVE-2022-30754 1Google 1Android Jun 17, 2026 Jul 12, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
CVE-2021-44221 1Siemens 1Simatic Easie Core Package Jun 17, 2026 Jul 12, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing framework. This could allow an...Show more A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing framework. This could allow an remote attacker to trigger a denial of service of the affected system.Show less
CVE-2020-35169 2Dell Oracle 6Bsafe Crypto C Micro Edition Bsafe Micro Edition SuiteDatabase+3 more Jun 17, 2026 Jul 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
CVE-2020-29508 2Dell Oracle 6Bsafe Crypto C Micro Edition Bsafe Micro Edition SuiteDatabase+3 more Jun 17, 2026 Jul 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.
CVE-2020-29507 2Dell Oracle 6Bsafe Crypto C Micro Edition Bsafe Micro Edition SuiteDatabase+3 more Jun 17, 2026 Jul 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.
CVE-2022-2047 3Debian EclipseNetapp 7Debian Linux Element Plug In For Vcenter ServerHci Compute Node+4 more Jun 17, 2026 Jul 7, 2022 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid inpu...Show more In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.Show less
CVE-2022-31121 1Hyperledger 1Fabric Jun 17, 2026 Jul 7, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commi...Show more Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error to the consensus client should the message be missing. Users are advised to upgrade to versions 2.2.7 or v2.4.5. There are no known workarounds for this issue.Show less
CVE-2022-29892 1Cybozu 1Garoon Jun 17, 2026 Jul 4, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service (DoS).
CVE-2022-28692 1Cybozu 1Garoon Jun 17, 2026 Jul 4, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler.
CVE-2022-27807 1Cybozu 1Garoon Jun 17, 2026 Jul 4, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories.
CVE-2022-27803 1Cybozu 1Garoon Jun 17, 2026 Jul 4, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space.
CVE-2022-28127 1Robustel 1R1510 Firmware Jun 17, 2026 Jun 30, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of...Show more A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability.Show less
CVE-2013-4144 1Swfupload Project 1Swfupload Nov 21, 2024 Jun 30, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is an object injection vulnerability in swfupload plugin for wordpress.
CVE-2022-2145 1Cloudflare 1Warp Jun 17, 2026 Jun 28, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM...Show more Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.Show less
CVE-2022-31036 1Argoproj 1Argo Cd Jun 17, 2026 Jun 27, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.3.0 are vulnerable to a symlink following bug allowing a malicious user with repository write access to l...Show more Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.3.0 are vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive YAML files from Argo CD's repo-server. A malicious Argo CD user with write access for a repository which is (or may be) used in a Helm-type Application may commit a symlink which points to an out-of-bounds file. If the target file is a valid YAML file, the attacker can read the contents of that file. Sensitive files which could be leaked include manifest files from other Applications' source repositories (potentially decrypted files, if you are using a decryption plugin) or any YAML-formatted secrets which have been mounted as files on the repo-server. Patches for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. If you are using a version >=v2.3.0 and do not have any Helm-type Applications you may disable the Helm config management tool as a workaround.Show less
CVE-2022-26864 1Dell 34Alienware M15 R5 Firmware G15 5515 FirmwareG5 Se 5505 Firmware+31 more Jun 17, 2026 Jun 23, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security con...Show more Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.Show less
CVE-2022-26863 1Dell 34Alienware M15 R5 Firmware G15 5515 FirmwareG5 Se 5505 Firmware+31 more Jun 17, 2026 Jun 23, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security con...Show more Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.Show less

Previous 1...191192193...648 Next