Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,742)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-4968 2Debian F5 2Debian Linux Nginx Nov 21, 2024 Nov 19, 2019 N/A· v4 4.8 MEDIUM· v3 5.8 MEDIUM· v2 nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
CVE-2011-4967 2Openpegasus Redhat 2Enterprise Linux Tog Pegasus Nov 21, 2024 Nov 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 tog-Pegasus has a package hash collision DoS vulnerability
CVE-2014-5118 3Fedoraproject RedhatTrusted Boot Project 3Enterprise Linux FedoraTrusted Boot Nov 21, 2024 Nov 18, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
CVE-2012-4438 1Jenkins 1Jenkins Nov 21, 2024 Nov 18, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.
CVE-2019-16762 1Simpleledger 1Slpjs Jun 17, 2026 Nov 15, 2019 N/A· v4 6.1 MEDIUM· v3 4.9 MEDIUM· v2 A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in orde...Show more A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.Show less
CVE-2019-16761 1Simpleledger 1Slp Validate Jun 17, 2026 Nov 15, 2019 N/A· v4 6.1 MEDIUM· v3 4.9 MEDIUM· v2 A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin s...Show more A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions >1.0.0 have been patched.Show less
CVE-2019-6663 1F5 16Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+13 more Jun 17, 2026 Nov 15, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerabl...Show more The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning (DNS Rebinding) attack.Show less
CVE-2011-0703 2Debian Gksu Polkit Project 2Debian Linux Gksu Polkit Nov 21, 2024 Nov 15, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session.
CVE-2019-14591 2Intel Netapp 5Cloud Backup Data Availability ServicesGraphics Driver+2 more Jun 17, 2026 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2019-11089 2Intel Netapp 5Cloud Backup Data Availability ServicesGraphics Driver+2 more Jun 17, 2026 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2018-12207 8Canonical DebianF5+5 more 778Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+775 more Nov 21, 2024 Nov 14, 2019 N/A· v4 6.5 MEDIUM· v3 4.9 MEDIUM· v2 Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local acces...Show more Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.Show less
CVE-2019-0149 1Intel 7Ethernet 700 Series Software Ethernet Controller 710 Bm1 FirmwareEthernet Controller X710 At2 Firmware+4 more Jun 17, 2026 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
CVE-2019-0147 1Intel 7Ethernet 700 Series Software Ethernet Controller 710 Bm1 FirmwareEthernet Controller X710 At2 Firmware+4 more Jun 17, 2026 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
CVE-2019-14566 1Intel 1Software Guard Extensions Sdk Oct 8, 2026 Nov 14, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
CVE-2019-11180 1Intel 1Baseboard Management Controller Firmware Jun 17, 2026 Nov 14, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11179 1Intel 1Baseboard Management Controller Firmware Jun 17, 2026 Nov 14, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.
CVE-2019-11175 1Intel 1Baseboard Management Controller Firmware Jun 17, 2026 Nov 14, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11137 2Hpe Intel 284Apollo 4200 Gen10 Server Firmware Apollo 4200 Gen9 Server FirmwareAtom C2308 Firmware+281 more Oct 8, 2026 Nov 14, 2019 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Inte...Show more Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.Show less
CVE-2012-1168 3Fedoraproject MoodleRedhat 3Enterprise Linux FedoraMoodle Nov 21, 2024 Nov 14, 2019 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
CVE-2019-0396 1Sap 1Businessobjects Business Intelligence Platform Jun 17, 2026 Nov 13, 2019 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can c...Show more SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.Show less

Previous 1...334335336...688 Next