CWE-20 · Improper Input Validation (page 3)
Page 3 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-54392 | Medium | 6.5 | 2026-09-09 | PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in BlockActorDataPacket. A player can crash… |
CVE-2026-74761 | High | 7.5 | 2026-09-09 | Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can… |
CVE-2026-73334 | High | 8.1 | 2026-09-09 | Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt… |
CVE-2025-7062 | | 2026-09-09 | A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and includi… | |
CVE-2026-21112 | Medium | 5.5 | 2026-09-09 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction… |
CVE-2026-21101 | Medium | 6.7 | 2026-09-09 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root p… |
CVE-2026-21094 | High | 8.8 | 2026-09-09 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. |
CVE-2026-21089 | High | 7.8 | 2026-09-09 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21088 | High | 7.8 | 2026-09-09 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memor… |
CVE-2026-21086 | High | 7.8 | 2026-09-09 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration. |
CVE-2026-12855 | High | 8.2 | 2026-09-09 | Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects. |
CVE-2026-87083 | Medium | 5.5 | 2026-09-09 | A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from_disk of the file tilelang/cache/kernel… |
CVE-2026-87600 | Medium | 6.5 | 2026-09-09 | Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypa… |
CVE-2026-87599 | Medium | 5.4 | 2026-09-09 | Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chr… |
CVE-2026-87590 | Medium | 5.9 | 2026-09-09 | Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted… |
CVE-2026-87573 | Medium | 4.3 | 2026-09-09 | Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Ch… |
CVE-2026-87568 | Medium | 4.3 | 2026-09-09 | Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI el… |
CVE-2026-87553 | High | 8.3 | 2026-09-09 | Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potent… |
CVE-2026-87510 | High | 8.3 | 2026-09-09 | Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-87472 | Medium | 4.2 | 2026-09-09 | Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI eleme… |
CVE-2026-87469 | Medium | 4.3 | 2026-09-09 | Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page vi… |
CVE-2026-75999 | High | 8.4 | 2026-09-08 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-pr… |
CVE-2026-75991 | High | 8.6 | 2026-09-08 | Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An atta… |
CVE-2026-75726 | Low | 3.5 | 2026-09-08 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker co… |
CVE-2026-58941 | High | 7.8 | 2026-09-08 | In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privile… |
CVE-2026-55273 | High | 7.8 | 2026-09-08 | In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of… |
CVE-2026-55256 | Medium | 6.5 | 2026-09-08 | In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of s… |
CVE-2026-45525 | Low | 3.3 | 2026-09-08 | In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no… |
CVE-2026-28638 | Low | 3.3 | 2026-09-08 | In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local informat… |
CVE-2026-28613 | High | 7.3 | 2026-09-08 | In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local esca… |
CVE-2026-81392 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-78518 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-73021 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72996 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72994 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72977 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70581 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70573 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69845 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69614 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
CVE-2026-69352 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69295 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69293 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69286 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. |
CVE-2026-69270 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-68839 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-79376 | High | 8.8 | 2026-09-08 | An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of… |
CVE-2026-62647 | High | 7.4 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as se… |
CVE-2026-86440 | Medium | 5.4 | 2026-09-07 | Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration co… |
CVE-2022-51017 | High | 7.5 | 2026-09-07 | PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 327… |
CVE-2022-51015 | Medium | 6.5 | 2026-09-07 | PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) or in UseItemTransactionData (typica… |
CVE-2022-51013 | Medium | 6.5 | 2026-09-07 | PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative… |
CVE-2022-51012 | Medium | 6.5 | 2026-09-07 | PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers ca… |
CVE-2022-51011 | Medium | 4.3 | 2026-09-07 | PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers t… |
CVE-2022-51010 | Medium | 6.5 | 2026-09-07 | PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside… |
CVE-2026-86351 | Medium | 6.1 | 2026-09-07 | Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with /. That check is insufficient because… |
CVE-2025-52651 | Low | 3.5 | 2026-09-07 | HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security… |
CVE-2021-48007 | Medium | 6.5 | 2026-09-06 | PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted mo… |
CVE-2026-50553 | | 2026-09-04 | Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"… | |
CVE-2026-84947 | Low | 3.7 | 2026-09-04 | undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maxi… |
CVE-2026-84504 | High | 8.1 | 2026-09-04 | fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. I… |
CVE-2026-84469 | High | 7.5 | 2026-09-04 | fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as… |
CVE-2026-85528 | Medium | 5.3 | 2026-09-04 | Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login… |
CVE-2026-85047 | Critical | 9.6 | 2026-09-03 | Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary… |
CVE-2026-85239 | Medium | 6.5 | 2026-09-03 | A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the… |
CVE-2026-85230 | Medium | 5.4 | 2026-09-03 | A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the wid… |
CVE-2026-85170 | Medium | 6.5 | 2026-09-03 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail composer without verifying it is a string… |
CVE-2026-49830 | Medium | 4.4 | 2026-09-02 | DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, when i… |
CVE-2026-84666 | Medium | 5.4 | 2026-09-02 | Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data… |
CVE-2026-53600 | | 2026-09-02 | async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermedia… | |
CVE-2026-76758 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*. |
CVE-2026-84357 | Medium | 6.5 | 2026-09-02 | Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin polic… |
CVE-2026-84325 | Critical | 9.8 | 2026-09-02 | Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system acce… |
CVE-2026-73768 | High | 7.3 | 2026-09-01 | A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result… |
CVE-2026-84135 | Critical | 9.8 | 2026-09-01 | Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. |
CVE-2026-82740 | | 2026-09-01 | Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array, type}} attribute… | |
CVE-2026-82738 | | 2026-09-01 | Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash… | |
CVE-2026-82732 | | 2026-09-01 | Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared allowlist or bound… | |
CVE-2026-83492 | | 2026-08-31 | Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1. | |
CVE-2026-81633 | | 2026-08-30 | Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id: ...) query with an unhandled KeyE… | |
CVE-2026-82550 | Medium | 5.3 | 2026-08-30 | A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a man… |
CVE-2026-82648 | High | 7.1 | 2026-08-30 | WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in… |
CVE-2026-82639 | High | 7.5 | 2026-08-30 | NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server'… |
CVE-2026-55068 | | 2026-08-28 | free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/{nfI… | |
CVE-2026-78009 | | 2026-08-28 | An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) con… | |
CVE-2026-59322 | Medium | 6.3 | 2026-08-27 | The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte pay… |
CVE-2026-59298 | Low | 3.1 | 2026-08-27 | Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud… |
CVE-2026-35869 | Critical | 9.8 | 2026-08-27 | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs d… |
CVE-2026-35868 | Critical | 9.8 | 2026-08-27 | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occu… |
CVE-2026-81827 | | 2026-08-27 | Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That does not perform WTForms field validation… | |
CVE-2026-81707 | Critical | 9.8 | 2026-08-27 | openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge th… |
CVE-2026-81686 | Medium | 6.2 | 2026-08-27 | openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authori… |
CVE-2026-57499 | Critical | 9.1 | 2026-08-27 | Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows… |
CVE-2026-30068 | High | 7.5 | 2026-08-27 | Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via… |
CVE-2026-30064 | High | 7.5 | 2026-08-27 | Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a craf… |
CVE-2026-30058 | High | 7.5 | 2026-08-27 | Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2026-26452 | High | 7.5 | 2026-08-27 | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP mess… |
CVE-2026-81662 | | 2026-08-27 | Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized… | |
CVE-2026-59354 | Critical | 9.6 | 2026-08-27 | In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registrati… |
CVE-2026-47880 | Medium | 5.4 | 2026-08-27 | A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, erro… |