Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,832)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3391 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 10, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to libra...Show more Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka Bug ID CSCtq52661.Show less
CVE-2014-3390 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 10, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows local users to obtain Linux root access by leveraging adm...Show more The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows local users to obtain Linux root access by leveraging administrative privileges and executing a crafted script, aka Bug IDs CSCuq41510 and CSCuq47574.Show less
CVE-2014-5376 1Adaptivecomputing 1Moab May 6, 2026 Oct 8, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does not validate that the requesting user matches the actor in the message, which allows remote authenticated users to impersona...Show more Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does not validate that the requesting user matches the actor in the message, which allows remote authenticated users to impersonate arbitrary users via the actor field in a message.Show less
CVE-2014-5375 1Adaptivecomputing 1Moab May 6, 2026 Oct 8, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via t...Show more The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags.Show less
CVE-2014-4870 1Brocade 2Vyatta 5400 Vrouter Vyatta 5400 Vrouter Software May 6, 2026 Oct 7, 2014 N/A· v4 N/A· v3 7.2 HIGH· v2 /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the su...Show more /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.Show less
CVE-2014-7861 1Apple 1Mac Os X May 6, 2026 Oct 5, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, which allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted web site.
CVE-2014-2645 1Hp 1Systems Insight Manager May 6, 2026 Oct 5, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.
CVE-2014-7278 1Zyxel 2Sbg3300 N Sbg3300 N Firmware May 6, 2026 Oct 4, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified...Show more The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginMsg variable's value, a different vulnerability than CVE-2014-7277.Show less
CVE-2014-5410 1Rockwellautomation 1Ab Micrologix Controller May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service...Show more The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.Show less
CVE-2014-6290 1News Project 1News May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue.
CVE-2014-2642 1Hp 1System Management Homepage May 6, 2026 Oct 2, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVE-2014-3395 1Cisco 1Webex Meetings Server May 6, 2026 Sep 30, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343.
CVE-2012-5621 1Ekiga 1Ekiga May 6, 2026 Sep 29, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.
CVE-2012-5619 1Sleuthkit 1The Sleuth Kit May 6, 2026 Sep 29, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more dif...Show more The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.Show less
CVE-2014-3823 1Juniper 1Junos Pulse Secure Access Service May 6, 2026 Sep 29, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVE-2014-3354 1Cisco 2Ios Ios Xe May 6, 2026 Sep 25, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow re...Show more Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.Show less
CVE-2014-4973 1Eset 2Endpoint Security Smart Security May 6, 2026 Sep 23, 2014 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain...Show more The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.Show less
CVE-2014-6430 1Wireshark 1Wireshark May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a de...Show more The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service (application crash) via a crafted file.Show less
CVE-2014-6429 1Wireshark 1Wireshark May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to...Show more The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service (application crash) via a crafted file.Show less
CVE-2014-3379 1Cisco 3Ios Xr Network Convergence System 6000Network Convergence System 6008 May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.

Previous 1...492493494...642 Next