Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,934)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-1399 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more Jun 17, 2026 Nov 12, 2019 N/A· v4 6.2 MEDIUM· v3 5.5 MEDIUM· v2 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'....Show more A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310.Show less
CVE-2019-1398 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Nov 12, 2019 N/A· v4 8.4 HIGH· v3 7.7 HIGH· v2 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulne...Show more A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1397.Show less
CVE-2019-1397 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more Jun 17, 2026 Nov 12, 2019 N/A· v4 8.4 HIGH· v3 7.7 HIGH· v2 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulne...Show more A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1398.Show less
CVE-2019-1389 1Microsoft 6Windows 10 Windows 7Windows 8.1+3 more Jun 17, 2026 Nov 12, 2019 N/A· v4 8.4 HIGH· v3 7.7 HIGH· v2 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulne...Show more A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397, CVE-2019-1398.Show less
CVE-2019-1310 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Nov 12, 2019 N/A· v4 6.8 MEDIUM· v3 6.8 MEDIUM· v2 A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service...Show more A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1399.Show less
CVE-2019-1309 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Nov 12, 2019 N/A· v4 6.8 MEDIUM· v3 6.8 MEDIUM· v2 A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service...Show more A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1310, CVE-2019-1399.Show less
CVE-2019-0721 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Nov 12, 2019 N/A· v4 9.1 CRITICAL· v3 9.0 HIGH· v2 A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Executio...Show more A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719.Show less
CVE-2019-0719 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more Jun 17, 2026 Nov 12, 2019 N/A· v4 9.1 CRITICAL· v3 9.0 HIGH· v2 A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Executio...Show more A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721.Show less
CVE-2019-0712 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more Jun 17, 2026 Nov 12, 2019 N/A· v4 6.8 MEDIUM· v3 6.8 MEDIUM· v2 A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service...Show more A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1309, CVE-2019-1310, CVE-2019-1399.Show less
CVE-2010-3359 2Debian Gargoyle Project 2Debian Linux Gargoyle Nov 21, 2024 Nov 12, 2019 N/A· v4 4.8 MEDIUM· v3 4.4 MEDIUM· v2 If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked...Show more If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account.Show less
CVE-2011-2897 3Debian GnomeRedhat 3Debian Linux Enterprise LinuxGdk Pixbuf Nov 21, 2024 Nov 12, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw
CVE-2009-5004 1Apache 1Qpid Cpp Nov 21, 2024 Nov 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .
CVE-2009-3614 2Debian Noping 2Debian Linux Liboping Nov 21, 2024 Nov 9, 2019 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 liboping 1.3.2 allows users reading arbitrary files upon the local system.
CVE-2019-3426 1Zte 1Zxupn 9000e Firmware Jun 17, 2026 Nov 8, 2019 N/A· v4 8.8 HIGH· v3 7.5 HIGH· v2 The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations.
CVE-2013-1889 1Mod Ruid2 Project 1Mod Ruid2 Nov 21, 2024 Nov 8, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
CVE-2013-1820 2Fedoraproject Redhat 2Fedora Tuned Nov 21, 2024 Nov 8, 2019 N/A· v4 5.5 MEDIUM· v3 4.7 MEDIUM· v2 tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
CVE-2013-1811 2Debian Mantisbt 2Debian Linux Mantisbt Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
CVE-2013-1751 1Twiki 1Twiki Nov 21, 2024 Nov 7, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
CVE-2010-2476 1Syscp Project 1Syscp Nov 21, 2024 Nov 7, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.
CVE-2010-2449 1Gource 1Gource Nov 21, 2024 Nov 7, 2019 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

Previous 1...295296297...647 Next