Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,947)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-22787 1Schneider Electric 14140cpu65150 Firmware 140noc77101 Firmware140noc78x00 Firmware+11 more Jun 17, 2026 Feb 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon...Show more A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)Show less
CVE-2022-22539 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user un...Show more When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.Show less
CVE-2022-22538 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to...Show more When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.Show less
CVE-2022-22537 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to t...Show more When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.Show less
CVE-2022-20037 1Google 1Android Jun 17, 2026 Feb 9, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...Show more In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705.Show less
CVE-2022-20036 1Google 1Android Jun 17, 2026 Feb 9, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...Show more In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689.Show less
CVE-2022-20017 1Google 1Android Jun 17, 2026 Feb 9, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...Show more In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991.Show less
CVE-2021-44454 1Intel 1Quartus Prime Jun 17, 2026 Feb 9, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-33155 1Intel 16Ac3168 Firmware Ac 1550 FirmwareAc 3165 Firmware+13 more Jun 17, 2026 Feb 9, 2022 N/A· v4 5.7 MEDIUM· v3 2.7 LOW· v2 Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacen...Show more Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.Show less
CVE-2021-33115 1Intel 1Uefi Wifi Driver Jun 17, 2026 Feb 9, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2021-33114 1Intel 15Ac 1550 Firmware Ac 3165 FirmwareAc 3168 Firmware+12 more Jun 17, 2026 Feb 9, 2022 N/A· v4 5.7 MEDIUM· v3 2.7 LOW· v2 Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent...Show more Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access.Show less
CVE-2021-33113 1Intel 15Ac 1550 Firmware Ac 3165 FirmwareAc 3168 Firmware+12 more Jun 17, 2026 Feb 9, 2022 N/A· v4 8.1 HIGH· v3 4.8 MEDIUM· v2 Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or informa...Show more Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.Show less
CVE-2021-33110 1Intel 15Ac 1550 Firmware Ac 3165 FirmwareAc 3168 Firmware+12 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of...Show more Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.Show less
CVE-2021-26613 1Tobesoft 1Nexacro Jun 17, 2026 Feb 9, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method.
CVE-2021-0183 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent...Show more Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.Show less
CVE-2021-0179 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2021-0178 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2021-0177 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjac...Show more Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.Show less
CVE-2021-0176 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of servi...Show more Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.Show less
CVE-2021-0175 1Intel 22Amt Ac 8260 Firmware Amt Ac 8265 FirmwareAmt Ac 9260 Firmware+19 more Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent...Show more Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.Show less

Previous 1...205206207...648 Next