Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,947)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-27827 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27826 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27574 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 7.2 HIGH· v3 7.5 HIGH· v2 Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.
CVE-2022-27573 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.
CVE-2021-4047 1Redhat 1Openshift Jun 17, 2026 Apr 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only affects Red Hat OpenShift 4.9.
CVE-2022-25595 1Asus 1Rt Ac86u Firmware Jun 17, 2026 Apr 7, 2022 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a server-to-client reply attempt.
CVE-2022-20784 1Cisco 1Web Security Appliance Jun 17, 2026 Apr 6, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies...Show more A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this vulnerability by sending crafted URLs to be processed by an affected device. A successful exploit could allow the attacker to bypass the web proxy and access web content that has been blocked by policy.Show less
CVE-2020-29013 1Fortinet 1Fortisandbox Jun 17, 2026 Apr 6, 2022 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.
CVE-2022-1243 1Uri.js Project 1Uri.js Jun 17, 2026 Apr 5, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.
CVE-2021-32974 1Moxa 4Nport Iaw5150a 12i/o Firmware Nport Iaw5150a 6i/o FirmwareNport Iaw5250a 12i/o Firmware+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.
CVE-2021-32970 1Moxa 4Nport Iaw5150a 12i/o Firmware Nport Iaw5150a 6i/o FirmwareNport Iaw5250a 12i/o Firmware+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
CVE-2021-26624 1Escanav 1Escan Anti Virus Jun 17, 2026 Apr 1, 2022 N/A· v4 8.8 HIGH· v3 10.0 HIGH· v2 An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vuln...Show more An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.Show less
CVE-2021-22277 1Abb 4800xa Base SoftwareCompact Product Suite+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial...Show more Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.Show less
CVE-2022-22311 1Ibm 1Security Verify Access Jun 17, 2026 Mar 31, 2022 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation of JWT tokens.
CVE-2022-24299 1Netgate 2Pfsense Pfsense Plus Jun 17, 2026 Mar 31, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change...Show more Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command.Show less
CVE-2021-39778 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution pri...Show more In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-196406138Show less
CVE-2021-39771 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed...Show more In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198661951Show less
CVE-2021-39764 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. Us...Show more In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995Show less
CVE-2021-39763 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...Show more In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-199176115Show less
CVE-2021-39740 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...Show more In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112Show less

Previous 1...201202203...648 Next