Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-22767 1Schneider Electric 2Powerlogic Egx100 Firmware Powerlogic Egx300 Firmware Jun 17, 2026 Jun 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially cr...Show more A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276Show less
CVE-2021-22766 1Schneider Electric 2Powerlogic Egx100 Firmware Powerlogic Egx300 Firmware Jun 17, 2026 Jun 11, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet
CVE-2021-22765 1Schneider Electric 2Powerlogic Egx100 Firmware Powerlogic Egx300 Firmware Jun 17, 2026 Jun 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially cr...Show more A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packetShow less
CVE-2021-25416 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.
CVE-2021-25415 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable.
CVE-2021-25414 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege.
CVE-2021-25413 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data with Samsung Contacts privilege.
CVE-2021-25411 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory.
CVE-2021-25410 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.
CVE-2021-25401 1Samsung 1Health Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action.
CVE-2021-25684 1Canonical 1Apport Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.
CVE-2021-25683 1Canonical 1Apport Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.
CVE-2021-25682 1Canonical 1Apport Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
CVE-2021-20329 1Mongodb 1Go Driver Jun 17, 2026 Jun 10, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields in...Show more Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to and including 1.5.0.Show less
CVE-2021-0134 1Intel 1Secl Dc Jun 17, 2026 Jun 9, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.
CVE-2021-0051 1Intel 1Server Platform Services Jun 17, 2026 Jun 9, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access.
CVE-2021-0070 1Intel 1Efi Bios 7215 Jun 17, 2026 Jun 9, 2021 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjace...Show more Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access.Show less
CVE-2020-8700 2Intel Netapp 8Aff Bios BiosCloud Backup+5 more Oct 8, 2026 Jun 9, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-24486 3Intel NetappSiemens 9Aff Bios BiosCloud Backup+6 more Oct 8, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
CVE-2020-12295 1Intel 13Dsl5320 Thunderbolt 2 Firmware Dsl5520 Thunderbolt 2 FirmwareDsl6340 Thunderbolt 3 Firmware+10 more Jun 17, 2026 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Previous 1...272273274...687 Next