← Back
CWE-20

13,740 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,740)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Huawei
1Harmonyos
Jun 17, 2026
Nov 23, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
1Huawei
1Harmonyos
Jun 17, 2026
Nov 23, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
1Huawei
1Harmonyos
Jun 17, 2026
Nov 23, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
1Mitsubishielectric
50Got2000 Gt2103 Pmbd Firmware
Got2000 Gt2103 Pmbds2 FirmwareGot2000 Gt2103 Pmbds Firmware+47 more
Jun 17, 2026
Nov 23, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series...Show more
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.Show less
1Moodle
1Moodle
Jun 17, 2026
Nov 22, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.
1Open Xchange
1Ox App Suite
Jun 17, 2026
Nov 22, 2021
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook.
1Dell
9X1008 Firmware
X1008p FirmwareX1018 Firmware+6 more
Jun 17, 2026
Nov 20, 2021
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header v...Show more
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.Show less
1Dell
9X1008 Firmware
X1008p FirmwareX1018 Firmware+6 more
Jun 17, 2026
Nov 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted da...Show more
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service.Show less
1Apache
1Ozone
Jun 17, 2026
Nov 19, 2021
N/A· v4
6.8 MEDIUM· v3
4.9 MEDIUM· v2
In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific request allowing access those blocks, bypassing other security checks like ACL.
1Intel
1Ethernet 500 Series Controllers Driver
Jun 17, 2026
Nov 17, 2021
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.
1Intel
1Administrative Tools For Intel Network Adapters
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local...Show more
Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access.Show less
1Intel
3Ethernet Network Controller E810 Cam1 Firmware
Ethernet Network Controller E810 Cam2 FirmwareEthernet Network Controller E810 Xxvam2 Firmware
Jun 17, 2026
Nov 17, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access.
1Intel
183Celeron J1750 Firmware
Celeron J1800 FirmwareCeleron J1850 Firmware+180 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
1Intel
484Celeron N2805
Celeron N2806Celeron N2807+481 more
Oct 7, 2026
Nov 17, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Ethernet Diagnostic Driver
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
157265 Firmware
Ac1550 FirmwareAc 3165 Firmware+12 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.5 MEDIUM· v3
6.1 MEDIUM· v2
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
1Intel
157265 Firmware
Ac1550 FirmwareAc 3165 Firmware+12 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjac...Show more
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.Show less
1Intel
137265 Firmware
9260 FirmwareAc 3165 Firmware+10 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
1Intel
167265 Firmware
9260 FirmwareAc1550 Firmware+13 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service...Show more
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.Show less
1Intel
157265 Firmware
Ac1550 FirmwareAc 3165 Firmware+12 more
Jun 17, 2026
Nov 17, 2021
N/A· v4
6.5 MEDIUM· v3
6.1 MEDIUM· v2
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.