← Back
CWE-20

13,740 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,740)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-18995
1Abb
1Pb610 Panel Builder 600
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests...Show more
The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.Show less
CVE-2019-18994
1Abb
1Pb610 Panel Builder 600
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
3.5 LOW· v2
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file s...Show more
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.Show less
CVE-2019-8817
1Apple
1Mac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.1. An application may be able to read restricted memory.
CVE-2019-8802
1Apple
1Mac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privileges.
CVE-2019-8794
1Apple
5Ipados
Iphone OsMac Os X+2 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory.
CVE-2019-8788
1Apple
3Ipados
Iphone OsMac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltra...Show more
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltration.Show less
CVE-2019-8724
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8723
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8722
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8721
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8711
1Apple
1Iphone Os
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when preview...Show more
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when previews are disabled.Show less
CVE-2019-8698
1Apple
2Iphone Os
Tvos
Jun 17, 2026
Dec 18, 2019
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to...Show more
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.Show less
CVE-2019-8670
1Apple
2Mac Os X
Safari
Jun 17, 2026
Dec 18, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing.
CVE-2019-8665
1Apple
2Iphone Os
Watchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpected application termination.
CVE-2019-8654
1Apple
1Safari
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.
CVE-2019-8637
1Apple
3Iphone Os
TvosWatchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
CVE-2019-8626
1Apple
2Iphone Os
Watchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.
CVE-2019-8566
1Apple
1Iphone Os
Jun 17, 2026
Dec 18, 2019
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication...Show more
An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication to the user.Show less
CVE-2019-8561
1Apple
1Mac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges.
CVE-2019-8549
1Apple
4Iphone Os
Mac Os XTvos+1 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application...Show more
Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to execute arbitrary code with system privileges.Show less