← Back
CWE-20

12,947 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,947)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pythondiscord
1Bot
Jun 17, 2026
Nov 5, 2021
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not...Show more
Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0Show less
1Fusionpbx
1Fusionpbx
Jun 17, 2026
Nov 5, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters (it is not constrained to preset values).
1Samsung
1Samsung Flow
Jun 17, 2026
Nov 5, 2021
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders.
1Samsung
1Group Sharing
Jun 17, 2026
Nov 5, 2021
N/A· v4
4.0 MEDIUM· v3
2.1 LOW· v2
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information.
1Google
1Android
Jun 17, 2026
Nov 5, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution.
1Google
1Android
Jun 17, 2026
Nov 5, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.
1Cisco
66Sf200 24 Firmware
Sf200 24fp FirmwareSf200 24p Firmware+63 more
Jun 17, 2026
Nov 4, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches co...Show more
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition.Show less
1Cisco
2Application Extension Platform
Ios Xr
Jun 17, 2026
Nov 4, 2021
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the u...Show more
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to a specific field in the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as a user with root-level privileges.Show less
1Phoenixcontact
2Pc Worx
Pc Worx Express
Jun 17, 2026
Nov 4, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project...Show more
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.Show less
1Apache
1Traffic Server
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new connections. This issue affects Apache Traffic Server 5.0.0 to 9.1...Show more
Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new connections. This issue affects Apache Traffic Server 5.0.0 to 9.1.0.Show less
2Apache
Debian
2Debian Linux
Traffic Server
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
2Apache
Debian
2Debian Linux
Traffic Server
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.
2Apache
Debian
2Debian Linux
Traffic Server
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
1Nec
4Clusterpro X
Clusterpro X SingleserversafeExpresscluster X+1 more
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESS...Show more
Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to read files upload via network..Show less
1Nec
4Clusterpro X
Clusterpro X SingleserversafeExpresscluster X+1 more
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER...Show more
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network.Show less
1Nec
4Clusterpro X
Clusterpro X SingleserversafeExpresscluster X+1 more
Jun 17, 2026
Nov 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER...Show more
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network.Show less
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a malicious file.
2Linux
Netapp
9Cloud Backup
H300e FirmwareH300s Firmware+6 more
Nov 21, 2024
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
4.6 MEDIUM· v2
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
2Kubernetes
Netapp
2Ingress Nginx
Trident
Jun 17, 2026
Oct 29, 2021
N/A· v4
7.1 HIGH· v3
5.5 MEDIUM· v2
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
1Huawei
2Emui
Magic Ui
Jun 17, 2026
Oct 28, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.