Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3612 6Debian FedoraprojectLinux+3 more 17Cloud Backup Communications Cloud Native Core Binding Support FunctionCommunications Cloud Native Core Network Exposure Function+14 more Jun 17, 2026 Jul 9, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or...Show more An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.Show less
CVE-2021-1562 1Cisco 1Broadworks Application Server Jun 17, 2026 Jul 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improp...Show more A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can execute within the XSI-Actions interface. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to join a Call Center instance and have calls that they do not have permissions to access distributed to them from the Call Center queue. At the time of publication, Cisco had not released updates that address this vulnerability for Cisco BroadWorks Application Server. However, firmware patches are available.Show less
CVE-2021-25441 1Samsung 1Ar Emoji Editor Jun 17, 2026 Jul 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.
CVE-2021-25437 1Linux 1Tizen Jun 17, 2026 Jul 8, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.
CVE-2021-25436 1Linux 1Tizen Jun 17, 2026 Jul 8, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.
CVE-2021-25435 1Linux 1Tizen Jun 17, 2026 Jul 8, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.
CVE-2021-25434 1Linux 1Tizen Jun 17, 2026 Jul 8, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware download mode.
CVE-2021-25428 1Google 1Android Jun 17, 2026 Jul 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances.
CVE-2021-31925 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface.
CVE-2020-25868 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service).
CVE-2021-26036 1Joomla 1Joomla Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table.
CVE-2021-27660 1Johnsoncontrols 1C Cure 9000 Firmware Jun 17, 2026 Jul 1, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs.
CVE-2021-22349 1Huawei 2Emui Magic Ui Jun 17, 2026 Jun 30, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart.
CVE-2021-34374 1Nvidia 1Jetson Linux Jun 17, 2026 Jun 30, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, a...Show more Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.Show less
CVE-2021-32567 2Apache Debian 2Debian Linux Traffic Server Jun 17, 2026 Jun 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVE-2021-32566 2Apache Debian 2Debian Linux Traffic Server Jun 17, 2026 Jun 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVE-2020-7870 1Unidocs 2Ezpdf Editor Ezpdf Reader Jun 17, 2026 Jun 29, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter.
CVE-2020-7869 1Mastersoft 1Zook Jun 17, 2026 Jun 29, 2021 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attack...Show more An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority.Show less
CVE-2020-7871 1Cnesty 1Helpcom Jun 17, 2026 Jun 29, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of the parameter. This issue affects: Cnesty Helpcom 10.0 versions...Show more A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of the parameter. This issue affects: Cnesty Helpcom 10.0 versions prior to.Show less
CVE-2021-28585 1Magento 1Magento Jun 17, 2026 Jun 28, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacke...Show more Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.Show less

Previous 1...270271272...687 Next