Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,740)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6696 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for...Show more sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130.Show less
CVE-2016-6694 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka...Show more sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525.Show less
CVE-2016-6693 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka...Show more sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585.Show less
CVE-2016-6674 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380.
CVE-2016-3937 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874.
CVE-2016-3936 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568.
CVE-2016-3920 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (device hang or reboot...Show more id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 30744884.Show less
CVE-2015-1000002 1Filedownload Project 1Filedownload May 6, 2026 Oct 6, 2016 N/A· v4 8.2 HIGH· v3 5.8 MEDIUM· v2 Open Proxy in filedownload v1.4 wordpress plugin
CVE-2016-6433 1Cisco 1Secure Firewall Management Center May 6, 2026 Oct 6, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.
CVE-2016-6422 1Cisco 1Ios May 6, 2026 Oct 6, 2016 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restr...Show more Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restrictions by sending packets that should have been recognized by a filter, aka Bug ID CSCuy64806.Show less
CVE-2016-1454 1Cisco 1Nx Os May 6, 2026 Oct 6, 2016 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer...Show more Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.Show less
CVE-2016-6426 1Cisco 2Unified Contact Center Express Unified Intelligence Center May 6, 2026 Oct 5, 2016 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accou...Show more The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653.Show less
CVE-2016-6380 1Cisco 6Ios Ios XeIos Xe 3.2ja+3 more May 6, 2026 Oct 5, 2016 N/A· v4 8.1 HIGH· v3 8.3 HIGH· v2 The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption...Show more The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.Show less
CVE-2016-6379 1Cisco 2Ios Ios Xe May 6, 2026 Oct 5, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089.
CVE-2016-6384 1Cisco 2Ios Ios Xe May 6, 2026 Oct 5, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an H.323 message, aka Bug ID CSCux04257.
CVE-2016-7907 1Qemu 1Qemu May 6, 2026 Oct 5, 2016 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of s...Show more The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.Show less
CVE-2016-6646 2Dell Emc 3Emc Unisphere Solutions EnablerUnisphere May 6, 2026 Oct 5, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input...Show more The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.Show less
CVE-2016-6645 2Dell Emc 3Emc Unisphere Solutions EnablerUnisphere May 6, 2026 Oct 5, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via craf...Show more The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class.Show less
CVE-2016-0913 1Emc 2Networker Module For Microsoft Applications Replication Manager May 6, 2026 Oct 5, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary co...Show more The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.Show less
CVE-2016-8278 1Huawei 3Usg9520 Usg9560Usg9580 May 6, 2026 Oct 3, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.

Previous 1...490491492...687 Next