← Back
CWE-20

13,782 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,782)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5606
1Axway
1Vordel Xml Gateway
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request.
CVE-2018-4462
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4460
1Apple
4Iphone Os
Mac Os XTvos+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4446
1Apple
1Iphone Os
Nov 21, 2024
Apr 3, 2019
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4440
1Apple
4Icloud
Iphone OsItunes+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4439
1Apple
4Icloud
Iphone OsItunes+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4435
1Apple
4Iphone Os
Mac Os XTvos+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4429
1Apple
2Iphone Os
Watchos
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
CVE-2018-4423
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4418
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4417
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4406
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4400
1Apple
3Iphone Os
Mac Os XWatchos
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, watchOS 5.1.
CVE-2018-4399
1Apple
4Iphone Os
Mac Os XTvos+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4398
1Apple
6Icloud
Iphone OsItunes+3 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, w...Show more
An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8.Show less
CVE-2018-4397
1Apple
1Apple Support
Nov 21, 2024
Apr 3, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.
CVE-2018-4396
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4395
1Apple
4Iphone Os
Mac Os XTvos+1 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
This issue was addressed with improved checks. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4389
1Apple
1Mac Os X
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4385
1Apple
1Iphone Os
Nov 21, 2024
Apr 3, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.