← Back
CWE-20

12,884 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,884)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-13198
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399117.
CVE-2017-13194
2Debian
Google
2Android
Debian Linux
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
CVE-2017-13186
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716.
CVE-2017-13176
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no add...Show more
In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68341964.Show less
CVE-2015-9246
1Skyboxsecurity
1Skybox Platform
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwa...Show more
An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwareUpdate and the JSP file is reached at /opt/skyboxview/thirdparty/jboss/server/web/work/jboss.web/localhost.Show less
CVE-2014-8166
1Cups
1Cups
Nov 21, 2024
Jan 12, 2018
N/A· v4
8.8 HIGH· v3
5.1 MEDIUM· v2
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.
CVE-2017-2158
1Lhaplus Project
1Lhaplus
Nov 21, 2024
Jan 12, 2018
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.
CVE-2017-15845
1Google
1Android
Nov 21, 2024
Jan 10, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak o...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation.Show less
CVE-2014-5003
1Ciborg Project
1Ciborg
Nov 21, 2024
Jan 10, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
chef/travis-cookbooks/ci_environment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 for Ruby allows local users to write to arbitrary files and gain privileges via a symlink attack on /tmp/perlbrew-installer.
CVE-2014-4994
1Gyazo Project
1Gyazo
Nov 21, 2024
Jan 10, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.
CVE-2017-15124
1Qemu
1Qemu
Nov 21, 2024
Jan 9, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did...Show more
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.Show less
CVE-2014-7222
1Teamspeak
1Teamspeak3
Nov 21, 2024
Jan 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted d...Show more
Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \\ (backslash) characters, a digit, a \ (backslash) character, and "z" in a series of nested img BBCODE tags.Show less
CVE-2014-1858
1Numpy
1Numpy
Nov 21, 2024
Jan 8, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVE-2018-5279
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5278
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e00c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5277
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e000. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5276
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e018. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5275
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5274
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E024. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less
CVE-2018-5273
1Malwarebytes
1Malwarebytes
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0...Show more
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e014. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).Show less