Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,904)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-11966 1Qualcomm 42Mdm9150 Firmware Mdm9206 FirmwareMdm9607 Firmware+39 more Nov 21, 2024 Apr 4, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206...Show more Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130Show less
CVE-2018-11830 1Qualcomm 8Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+5 more Nov 21, 2024 Apr 4, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650,...Show more Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820AShow less
CVE-2015-5606 1Axway 1Vordel Xml Gateway Nov 21, 2024 Apr 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request.
CVE-2018-4462 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4460 1Apple 4Iphone Os Mac Os XTvos+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4446 1Apple 1Iphone Os Nov 21, 2024 Apr 3, 2019 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4440 1Apple 4Icloud Iphone OsItunes+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4439 1Apple 4Icloud Iphone OsItunes+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4435 1Apple 4Iphone Os Mac Os XTvos+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4429 1Apple 2Iphone Os Watchos Nov 21, 2024 Apr 3, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
CVE-2018-4423 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4418 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4417 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4406 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4400 1Apple 3Iphone Os Mac Os XWatchos Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, watchOS 5.1.
CVE-2018-4399 1Apple 4Iphone Os Mac Os XTvos+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4398 1Apple 6Icloud Iphone OsItunes+3 more Nov 21, 2024 Apr 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, w...Show more An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8.Show less
CVE-2018-4397 1Apple 1Apple Support Nov 21, 2024 Apr 3, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.
CVE-2018-4396 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4395 1Apple 4Iphone Os Mac Os XTvos+1 more Nov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 This issue was addressed with improved checks. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Previous 1...321322323...646 Next