← Back
CWE-20

12,891 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,891)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-10976
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222050.Show less
CVE-2018-10975
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222104.Show less
CVE-2018-10974
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222100.Show less
CVE-2018-10955
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222548.Show less
CVE-2018-10954
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222550.Show less
CVE-2018-10953
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x0022204C.Show less
CVE-2018-10952
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222088.Show less
CVE-2018-2416
1Sap
1Identity Management
Nov 21, 2024
May 9, 2018
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.
CVE-2018-0961
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
May 9, 2018
N/A· v4
7.6 HIGH· v3
7.4 HIGH· v2
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Windows Server 2016, Wi...Show more
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.Show less
CVE-2018-0959
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
May 9, 2018
N/A· v4
7.6 HIGH· v3
7.4 HIGH· v2
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability...Show more
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.Show less
CVE-2018-10828
1Alps
1Pointing Device Driver
Nov 21, 2024
May 9, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section...Show more
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.Show less
CVE-2018-10830
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 9, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0.Show less
CVE-2018-1000168
3Debian
Nghttp2Nodejs
3Debian Linux
Nghttp2Node.js
Jun 9, 2025
May 8, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears...Show more
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.Show less
CVE-2018-10809
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222...Show more
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-8873.Show less
CVE-2018-10799
1Brave
1Brave
Nov 21, 2024
May 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT eleme...Show more
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT element.Show less
CVE-2018-10798
1Brave
1Brave
Nov 21, 2024
May 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second.
CVE-2018-10796
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222...Show more
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222014.Show less
CVE-2018-10776
1Mp3gain
1Mp3gain
Nov 21, 2024
May 7, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.
CVE-2018-0494
4Canonical
DebianGnu+1 more
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Nov 21, 2024
May 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
CVE-2018-9154
1Jasper Project
1Jasper
Jun 17, 2026
May 4, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a differ...Show more
There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.Show less