CWE-20
12,947 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVEs (12,947)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not...Show more |
An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters (it is not constrained to preset values). |
A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders. |
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. |
Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution. |
A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. |
1Cisco 66Sf200 24 Firmware Sf200 24fp FirmwareSf200 24p Firmware+63 moreJun 17, 2026 Nov 4, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches co...Show more |
1Cisco 2Application Extension Platform Ios XrJun 17, 2026 Nov 4, 2021 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the u...Show more |
1Phoenixcontact 2Pc Worx Pc Worx ExpressJun 17, 2026 Nov 4, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project...Show more |
Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new connections. This issue affects Apache Traffic Server 5.0.0 to 9.1...Show more |
2Apache Debian2Debian Linux Traffic ServerJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0. |
2Apache Debian2Debian Linux Traffic ServerJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1. |
2Apache Debian2Debian Linux Traffic ServerJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0. |
1Nec 4Clusterpro X Clusterpro X SingleserversafeExpresscluster X+1 moreJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESS...Show more |
1Nec 4Clusterpro X Clusterpro X SingleserversafeExpresscluster X+1 moreJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER...Show more |
1Nec 4Clusterpro X Clusterpro X SingleserversafeExpresscluster X+1 moreJun 17, 2026 Nov 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER...Show more |
2Debian Google2Chrome Debian LinuxJun 17, 2026 Nov 2, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a malicious file. |
2Linux Netapp9Cloud Backup H300e FirmwareH300s Firmware+6 moreNov 21, 2024 Nov 2, 2021 N/A· v4 8.8 HIGH· v3 4.6 MEDIUM· v2 Insufficient data validation in waitid allowed an user to escape sandboxes on Linux. |
2Kubernetes Netapp2Ingress Nginx TridentJun 17, 2026 Oct 29, 2021 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster. |
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. |