CWE-20
12,946 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVEs (12,946)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel. |
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel. |
Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields in...Show more |
Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access. |
Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access. |
Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjace...Show more |
2Intel Netapp8Aff Bios BiosCloud Backup+5 moreJun 17, 2026 Jun 9, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
3Intel NetappSiemens9Aff Bios BiosCloud Backup+6 moreJun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. |
1Intel 13Dsl5320 Thunderbolt 2 Firmware Dsl5520 Thunderbolt 2 FirmwareDsl6340 Thunderbolt 3 Firmware+10 moreJun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. |
Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for custom field name. |
1Bosch 5Cpp13 Firmware Cpp4 FirmwareCpp6 Firmware+2 moreJun 17, 2026 Jun 9, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs. |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user res...Show more |
1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user res...Show more |