CWE-20 · Improper Input Validation (page 66)
Page 66 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-4353 | Critical | 9.8 | 2019-04-03 | A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14. |
CVE-2018-4348 | Medium | 5.5 | 2019-04-03 | A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14. |
CVE-2018-4346 | Medium | 5.5 | 2019-04-03 | A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.1… |
CVE-2018-4342 | Medium | 5.5 | 2019-04-03 | A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1. |
CVE-2018-4338 | Medium | 5.5 | 2019-04-03 | A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14. |
CVE-2018-4335 | Medium | 5.5 | 2019-04-03 | A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12. |
CVE-2018-4333 | Medium | 5.5 | 2019-04-03 | A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14. |
CVE-2018-4322 | Low | 3.3 | 2019-04-03 | This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12. |
CVE-2018-4321 | Medium | 5.3 | 2019-04-03 | A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected v… |
CVE-2018-4313 | Medium | 5.5 | 2019-04-03 | A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected… |
CVE-2018-4307 | Medium | 4.3 | 2019-04-03 | A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12. |
CVE-2018-4305 | Medium | 6.5 | 2019-04-03 | An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5. |
CVE-2018-4304 | Medium | 5.0 | 2019-04-03 | A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. |
CVE-2018-4303 | High | 7.8 | 2019-04-03 | An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.1… |
CVE-2018-4295 | Critical | 9.8 | 2019-04-03 | An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14. |
CVE-2018-4293 | Medium | 5.3 | 2019-04-03 | A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS… |
CVE-2018-4279 | Medium | 5.3 | 2019-04-03 | An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2. |
CVE-2018-4274 | High | 7.5 | 2019-04-03 | A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Sa… |
CVE-2018-4260 | Medium | 6.5 | 2019-04-03 | An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2. |
CVE-2018-4195 | Medium | 6.5 | 2019-04-03 | An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12. |
CVE-2017-13911 | High | 7.8 | 2019-04-03 | A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, ma… |
CVE-2018-4053 | Medium | 5.5 | 2019-04-02 | An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send… |
CVE-2018-1640 | High | 8.8 | 2019-04-02 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By se… |
CVE-2017-16775 | High | 7.1 | 2019-04-01 | Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct… |
CVE-2019-10672 | Critical | 9.8 | 2019-03-31 | treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. |
CVE-2018-20378 | High | 7.5 | 2019-03-29 | The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticated attackers to exe… |
CVE-2019-1760 | Medium | 6.8 | 2019-03-28 | A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device… |
CVE-2019-1756 | High | 7.2 | 2019-03-28 | A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device… |
CVE-2019-1755 | Medium | 6.5 | 2019-03-28 | A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrar… |
CVE-2019-1754 | High | 8.8 | 2019-03-28 | A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privile… |
CVE-2019-1753 | High | 8.8 | 2019-03-28 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS com… |
CVE-2019-1752 | High | 7.5 | 2019-03-28 | A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to re… |
CVE-2019-1751 | High | 8.6 | 2019-03-28 | A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either a… |
CVE-2019-1750 | High | 7.4 | 2019-03-28 | A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent a… |
CVE-2019-1749 | High | 7.4 | 2019-03-28 | A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) coul… |
CVE-2019-1747 | High | 8.6 | 2019-03-28 | A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an… |
CVE-2019-1746 | High | 7.4 | 2019-03-28 | A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjace… |
CVE-2019-1743 | High | 8.8 | 2019-03-28 | A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem o… |
CVE-2019-1741 | High | 7.5 | 2019-03-28 | A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2019-1740 | High | 8.6 | 2019-03-28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem… |
CVE-2019-1739 | High | 7.5 | 2019-03-28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem… |
CVE-2019-1738 | High | 7.5 | 2019-03-28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem… |
CVE-2018-19016 | High | 7.5 | 2019-03-27 | Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earl… |
CVE-2018-19642 | Medium | 5.1 | 2019-03-27 | Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2019-9917 | Medium | 6.5 | 2019-03-27 | ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding. |
CVE-2019-10063 | Critical | 9.0 | 2019-03-26 | Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using… |
CVE-2017-7342 | Critical | 9.8 | 2019-03-25 | A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via… |
CVE-2017-9376 | Medium | 6.5 | 2019-03-25 | ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfi… |
CVE-2019-1766 | High | 7.5 | 2019-03-22 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticat… |
CVE-2019-1716 | High | 7.5 | 2019-03-22 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Seri… |
CVE-2019-3871 | Medium | 6.5 | 2019-03-21 | A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building… |
CVE-2018-13798 | High | 7.5 | 2019-03-21 | A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions <… |
CVE-2015-6461 | Medium | 5.4 | 2019-03-21 | Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BM… |
CVE-2019-6690 | High | 7.5 | 2019-03-21 | python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg… |
CVE-2018-20669 | High | 7.8 | 2019-03-21 | An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in… |
CVE-2018-20162 | Critical | 9.9 | 2019-03-21 | Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restr… |
CVE-2018-19524 | Critical | 9.8 | 2019-03-21 | An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A l… |
CVE-2018-15818 | High | 7.5 | 2019-03-21 | An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicio… |
CVE-2018-20106 | Medium | 6.5 | 2019-03-15 | In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or siml… |
CVE-2018-1658 | Medium | 5.4 | 2019-03-14 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation o… |
CVE-2018-12222 | Low | 3.3 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12221 | High | 7.8 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12219 | Medium | 5.5 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12216 | High | 8.2 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12215 | Medium | 6.0 | 2019-03-14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka… |
CVE-2018-12211 | Medium | 6.5 | 2019-03-14 | Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12198 | Medium | 6.0 | 2019-03-14 | Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially… |
CVE-2018-12196 | Medium | 6.7 | 2019-03-14 | Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially… |
CVE-2018-12190 | Medium | 6.7 | 2019-03-14 | Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may all… |
CVE-2018-12188 | Medium | 4.6 | 2019-03-14 | Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an un… |
CVE-2018-12187 | High | 7.5 | 2019-03-14 | Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauth… |
CVE-2018-12185 | Medium | 6.8 | 2019-03-14 | Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to poten… |
CVE-2018-20800 | Medium | 6.5 | 2019-03-13 | An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major update… |
CVE-2019-0271 | Medium | 6.5 | 2019-03-12 | ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, leading to an… |
CVE-2019-1616 | High | 8.6 | 2019-03-11 | A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resu… |
CVE-2019-1605 | High | 7.8 | 2019-03-08 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability… |
CVE-2018-4055 | Medium | 5.5 | 2019-03-08 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce… |
CVE-2018-4054 | High | 7.8 | 2019-03-08 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce… |
CVE-2019-1598 | High | 8.6 | 2019-03-07 | Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software coul… |
CVE-2019-1597 | High | 8.6 | 2019-03-07 | Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software coul… |
CVE-2019-1594 | High | 7.4 | 2019-03-06 | A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) cond… |
CVE-2019-1588 | Medium | 4.4 | 2019-03-06 | A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local att… |
CVE-2019-0670 | Medium | 6.1 | 2019-03-05 | A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerabi… |
CVE-2019-0657 | Medium | 5.9 | 2019-03-05 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerabil… |
CVE-2019-0635 | Medium | 6.2 | 2019-03-05 | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a… |
CVE-2019-0604 | Critical | 9.8 | 2019-03-05 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2019-0594 | High | 8.8 | 2019-03-05 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2019-6219 | High | 7.5 | 2019-03-05 | A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciou… |
CVE-2018-19640 | Medium | 4.4 | 2019-03-05 | If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can k… |
CVE-2018-19636 | High | 7.3 | 2019-03-05 | Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an… |
CVE-2019-6555 | High | 7.8 | 2019-02-28 | Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker t… |
CVE-2018-12401 | High | 7.5 | 2019-02-28 | Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denia… |
CVE-2019-1988 | High | 8.8 | 2019-02-28 | In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_serv… |
CVE-2018-13904 | Critical | 9.8 | 2019-02-25 | Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-11935 | Medium | 5.3 | 2019-02-25 | Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11932 | Critical | 9.1 | 2019-02-25 | Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-11931 | High | 7.8 | 2019-02-25 | Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect… |
CVE-2018-11864 | Medium | 5.5 | 2019-02-25 | Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2019-1689 | High | 7.3 | 2019-02-25 | A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope… |
CVE-2019-1691 | Medium | 5.8 | 2019-02-21 | A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected rest… |