Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,946)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-22381 1Huawei 2Emui Magic Ui Jun 17, 2026 Aug 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause an infinite loop in DoS.
CVE-2021-33527 1Mbconnectline 1Mbdialup Jun 17, 2026 Aug 2, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to...Show more In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.Show less
CVE-2021-29298 1Emerson 1Proficy Machine Edition Jun 17, 2026 Jul 30, 2021 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the comp...Show more Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll".Show less
CVE-2021-37595 1Freerdp 1Freerdp Jun 17, 2026 Jul 30, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.
CVE-2021-37594 1Freerdp 1Freerdp Jun 17, 2026 Jul 30, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.
CVE-2021-36742 1Trendmicro 4Apex One OfficescanOfficescan Business Security+1 more Jun 17, 2026 Jul 29, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations....Show more A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.Show less
CVE-2021-34432 1Eclipse 1Mosquitto Jul 2, 2026 Jul 27, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
CVE-2021-32795 1Archisteamfarm Project 1Archisteamfarm Jun 17, 2026 Jul 26, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service (aka DoS) vulnerability which allows attacker to remot...Show more ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service (aka DoS) vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat message exists. The user sending the message does not need to be authorized within the bot or ASF process. The attacker needs to know ASF's `CommandPrefix` in advance, but majority of ASF setups run with an unchanged default value. This attack does not allow attacker to gain any potentially-sensitive information, such as logins or passwords, does not allow to execute arbitrary commands and otherwise exploit the crash further. The issue is patched in ASF V4.3.1.0. The only workaround which guarantees complete protection is running all bots with `OnlineStatus` of `0` (Offline). In this setup, ASF is able to ignore even the specifically-crafted message without attempting to interpret it.Show less
CVE-2021-29770 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
CVE-2021-1097 1Nvidia 1Virtual Gpu Jun 17, 2026 Jul 21, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field...Show more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to information disclosure, data tampering, or denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).Show less
CVE-2020-7866 1Tobesoft 1Xplatform Jun 17, 2026 Jul 20, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation
CVE-2020-5321 1Dell 2Emc Openmanage Enterprise Emc Openmanage Enterprise Modular Jun 17, 2026 Jul 19, 2021 N/A· v4 7.6 HIGH· v3 5.5 MEDIUM· v2 Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user wit...Show more Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.Show less
CVE-2021-29780 1Ibm 1Resilient Security Orchestration Automation And Response Jun 17, 2026 Jul 19, 2021 N/A· v4 4.7 MEDIUM· v3 6.5 MEDIUM· v2 IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.
CVE-2021-33592 1Naver 1Toolbar Jun 17, 2026 Jul 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.
CVE-2021-3452 1Lenovo 1Bios Jun 17, 2026 Jul 16, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2021-36758 11password 1Connect Jun 17, 2026 Jul 16, 2021 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets...Show more 1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the user is authorized to access, but limited to the existing authorizations of the Secret Automation the token is created in.Show less
CVE-2021-0278 1Juniper 1Junos Jun 17, 2026 Jul 15, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:...Show more An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4 junos:20.1R2-S2 junos:20.1R3 junos:20.2R3-S1 junos:20.3X75-D20 junos:20.3X75-D30 junos:20.4R2-S1 junos:20.4R3 junos:21.1R1-S1 junos:21.1R2 junos:21.2R1 junos:21.3R1 This issue affects: Juniper Networks Junos OS 19.3 versions 19.3R1 and above prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.Show less
CVE-2021-20496 1Ibm 1Security Verify Access Jun 17, 2026 Jul 15, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation. IBM X-Force ID: 197966.
CVE-2021-34516 1Microsoft 8Windows 10 Windows 7Windows 8.1+5 more Aug 10, 2026 Jul 14, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Win32k Elevation of Privilege Vulnerability
CVE-2021-0600 1Google 1Android Jun 17, 2026 Jul 14, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution...Show more In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-179042963Show less

Previous 1...228229230...648 Next