← Back
CWE-20

13,782 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,782)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-4850
1Siemens
2Simatic S7 400 Firmware
Simatic S7 400h Firmware
Nov 21, 2024
May 16, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below (All versions), SIMATIC S7-400 (incl. F) CPU hardware version 5.0 (All firmware versions < V5.2), SIMATIC S7-400H CPU har...Show more
A vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below (All versions), SIMATIC S7-400 (incl. F) CPU hardware version 5.0 (All firmware versions < V5.2), SIMATIC S7-400H CPU hardware version 4.5 and below (All versions). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart.Show less
CVE-2018-3634
1Intel
1Online Connect Access
Nov 21, 2024
May 15, 2018
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local access.
CVE-2018-3611
1Intel
1Graphics Driver
Nov 21, 2024
May 15, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.
CVE-2017-14439
1Moxa
1Edr 810 Firmware
Nov 21, 2024
May 14, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet t...Show more
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability.Show less
CVE-2017-14438
1Moxa
1Edr 810 Firmware
Nov 21, 2024
May 14, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet t...Show more
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability.Show less
CVE-2017-12124
1Moxa
1Edr 810 Firmware
Nov 21, 2024
May 14, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server cra...Show more
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability.Show less
CVE-2017-6021
2Aveva
Schneider Electric
2Clearscada
Clearscada
Nov 21, 2024
May 14, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the Cl...Show more
In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).Show less
CVE-2018-11035
12345.cc
1Security Guard
Nov 21, 2024
May 14, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IO...Show more
In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019.Show less
CVE-2018-11034
12345.cc
1Security Guard
Nov 21, 2024
May 14, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IO...Show more
In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x8000200D.Show less
CVE-2018-3612
1Intel
18Ayaplcel.86a
BiosBnkbl357.86a+15 more
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
CVE-2018-10977
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x002220E4.Show less
CVE-2018-10976
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222050.Show less
CVE-2018-10975
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222104.Show less
CVE-2018-10974
12345.cc
1Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222100.Show less
CVE-2018-10955
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222548.Show less
CVE-2018-10954
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222550.Show less
CVE-2018-10953
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x0022204C.Show less
CVE-2018-10952
12345 Security Guard Project
12345 Security Guard
Nov 21, 2024
May 10, 2018
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOC...Show more
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222088.Show less
CVE-2018-2416
1Sap
1Identity Management
Nov 21, 2024
May 9, 2018
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.
CVE-2018-0961
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
May 9, 2018
N/A· v4
7.6 HIGH· v3
7.4 HIGH· v2
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Windows Server 2016, Wi...Show more
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.Show less