Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3028 1Git Big Picture Project 1Git Big Picture Jun 17, 2026 Jan 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.
CVE-2021-21606 1Jenkins 1Jenkins Jun 17, 2026 Jan 13, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short pa...Show more Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path.Show less
CVE-2021-21464 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jan 12, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.Show less
CVE-2021-0322 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 5.0 MEDIUM· v3 1.9 LOW· v2 In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User i...Show more In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: Android; Versions: Android-10, Android-11, Android-9; Android ID: A-159145361.Show less
CVE-2021-0313 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Us...Show more In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514.Show less
CVE-2020-0471 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege bet...Show more In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567.Show less
CVE-2020-16040 1Google 1Chrome Jun 17, 2026 Jan 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-16015 1Google 1Chrome Jun 17, 2026 Jan 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-1066 1Nvidia 1Virtual Gpu Manager Jun 17, 2026 Jan 8, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU...Show more NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).Show less
CVE-2021-1065 1Nvidia 1Virtual Gpu Manager Jun 17, 2026 Jan 8, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11...Show more NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).Show less
CVE-2021-1060 1Nvidia 1Virtual Gpu Manager Jun 17, 2026 Jan 8, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version...Show more NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).Show less
CVE-2020-4667 1Ibm 1Engineering Requirements Quality Assistant On Premises Jun 17, 2026 Jan 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282.
CVE-2021-1053 1Nvidia 1Gpu Driver Jun 17, 2026 Jan 8, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead t...Show more NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service.Show less
CVE-2020-6656 1Eaton 1Easysoft Jun 17, 2026 Jan 7, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking...Show more Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.Show less
CVE-2020-6655 1Eaton 1Easysoft Jun 17, 2026 Jan 7, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to u...Show more The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.Show less
CVE-2020-4896 1Ibm 1Emptoris Sourcing Jun 17, 2026 Jan 7, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.
CVE-2020-36175 1Ninjaforms 1Ninja Forms Jun 17, 2026 Jan 6, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field.
CVE-2020-27844 3Debian OracleUclouvain 3Debian Linux OpenjpegOutside In Technology Jun 17, 2026 Jan 5, 2021 N/A· v4 7.8 HIGH· v3 8.3 HIGH· v2 A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highes...Show more A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.Show less
CVE-2020-25275 3Debian DovecotFedoraproject 3Debian Linux DovecotFedora Jun 17, 2026 Jan 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.
CVE-2020-35493 4Broadcom FedoraprojectGnu+1 more 8Binutils Brocade Fabric Operating System FirmwareCloud Backup+5 more Oct 8, 2026 Jan 4, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application av...Show more A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.Show less

Previous 1...285286287...687 Next