← Back
CWE-20

13,766 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (13,766)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14965
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000cc.
CVE-2017-14964
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300005c.
CVE-2017-14963
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000058.
CVE-2017-17804
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084.
CVE-2017-17803
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475.Show less
CVE-2017-17802
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080.Show less
CVE-2017-17801
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060.Show less
CVE-2017-17800
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798.Show less
CVE-2017-17799
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068.Show less
CVE-2017-17798
1Tgsoft
1Vir.it Explorer
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800.Show less
CVE-2017-17797
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058.
CVE-2017-17796
1Tgsoft
1Vir.it Explorer Lite
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x...Show more
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x827300A4.Show less
CVE-2017-17795
1Ikarussecurity
1Anti.virus
May 13, 2026
Dec 20, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088.
CVE-2017-15103
2Heketi Project
Redhat
2Enterprise Linux
Heketi
May 13, 2026
Dec 18, 2017
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as...Show more
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.Show less
CVE-2017-14583
1Netapp
1Clustered Data Ontap
May 13, 2026
Dec 18, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in SMB environments.
CVE-2017-3191
1D Link
2Dir 130 Firmware
Dir 330 Firmware
May 13, 2026
Dec 16, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate t...Show more
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.Show less
CVE-2016-10703
1Ecstatic Project
1Ecstatic
May 13, 2026
Dec 14, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously c...Show more
A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.Show less
CVE-2017-17537
1Mikrotik
1Routerboard
Sep 16, 2026
Dec 13, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS...Show more
MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS.Show less
CVE-2017-14589
1Atlassian
1Bamboo
May 13, 2026
Dec 13, 2017
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker who has restricted administration rights to Bamboo or who hosts a website that a Bamboo administrato...Show more
It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker who has restricted administration rights to Bamboo or who hosts a website that a Bamboo administrator visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Bamboo. All versions of Bamboo before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.Show less
CVE-2017-17565
1Xen
1Xen
May 13, 2026
Dec 12, 2017
N/A· v4
5.6 MEDIUM· v3
4.7 MEDIUM· v2
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P.