Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-1935 29base Project Debian 29base Debian Linux Nov 21, 2024 Nov 21, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.
CVE-2014-0084 1Redhat 1Openshift Origin Nov 21, 2024 Nov 21, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
CVE-2012-4524 2Fedoraproject Sillycycle 2Fedora Xlockmore Nov 21, 2024 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 xlockmore before 5.43 'dclock' security bypass vulnerability
CVE-2012-3460 1Redhat 1Enterprise Mrg Nov 21, 2024 Nov 21, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 cumin: At installation postgresql database user created without password
CVE-2013-7172 1Slackware 1Slackware Linux Nov 21, 2024 Nov 21, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary co...Show more Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.Show less
CVE-2013-7171 1Slackware 1Slackware Linux Nov 21, 2024 Nov 21, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges.
CVE-2012-3543 3Canonical DebianMono Project 3Debian Linux MonoUbuntu Linux Nov 21, 2024 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mono 2.10.x ASP.NET Web Form Hash collision DoS
CVE-2012-2350 2Debian Pam Shield Project 2Debian Linux Pam Shield Nov 21, 2024 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 pam_shield before 0.9.4: Default configuration does not perform protective action
CVE-2013-2093 1Dolibarr 1Dolibarr Erp/crm Nov 21, 2024 Nov 20, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
CVE-2013-1816 4Debian FedoraprojectMediawiki+1 more 4Debian Linux Enterprise LinuxFedora+1 more Nov 21, 2024 Nov 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.
CVE-2015-1607 2Canonical Gnupg 2Gnupg Ubuntu Linux Nov 21, 2024 Nov 20, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) vi...Show more kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) via a crafted keyring file, related to sign extensions and "memcpy with overlapping ranges."Show less
CVE-2011-0529 2Debian Weborf Project 2Debian Linux Weborf Nov 21, 2024 Nov 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.
CVE-2010-4660 1Status 1Statusnet Nov 21, 2024 Nov 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
CVE-2011-1028 2Debian Smarty 2Debian Linux Smarty Nov 21, 2024 Nov 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.
CVE-2019-11289 1Cloudfoundry 2Cf Deployment Routing Release Jun 17, 2026 Nov 19, 2019 N/A· v4 8.6 HIGH· v3 7.8 HIGH· v2 Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gor...Show more Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.Show less
CVE-2011-2922 1Ktsuss Project 1Ktsuss Nov 21, 2024 Nov 19, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.
CVE-2012-6135 2Phusion Redhat 2Openshift Passenger Nov 21, 2024 Nov 19, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.
CVE-2012-6070 1Falconpl 1Falconpl Nov 21, 2024 Nov 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks.
CVE-2011-4968 2Debian F5 2Debian Linux Nginx Nov 21, 2024 Nov 19, 2019 N/A· v4 4.8 MEDIUM· v3 5.8 MEDIUM· v2 nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
CVE-2011-4967 2Openpegasus Redhat 2Enterprise Linux Tog Pegasus Nov 21, 2024 Nov 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 tog-Pegasus has a package hash collision DoS vulnerability

Previous 1...333334335...687 Next