CWE-20 · Improper Input Validation (page 73)
Page 73 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11222 | High | 7.5 | 2018-06-16 | Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint. |
CVE-2018-12492 | High | 7.5 | 2018-06-15 | PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php. |
CVE-2018-12459 | Medium | 6.5 | 2018-06-15 | An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion viola… |
CVE-2018-12458 | Medium | 6.5 | 2018-06-15 | An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while c… |
CVE-2018-11574 | Critical | 9.8 | 2018-06-14 | Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authen… |
CVE-2017-12070 | High | 8.8 | 2018-06-14 | Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code. |
CVE-2018-4833 | High | 8.8 | 2018-06-14 | A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET v… |
CVE-2017-17173 | High | 7.8 | 2018-06-14 | Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary mem… |
CVE-2018-8244 | Medium | 6.5 | 2018-06-14 | An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privil… |
CVE-2018-8218 | High | 7.7 | 2018-06-14 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a gu… |
CVE-2018-5488 | Critical | 9.8 | 2018-06-13 | NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship… |
CVE-2018-10363 | High | 7.5 | 2018-06-13 | An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers t… |
CVE-2017-17443 | Medium | 6.5 | 2018-06-13 | OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by… |
CVE-2018-7162 | High | 7.5 | 2018-06-13 | All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which p… |
CVE-2018-7161 | High | 7.5 | 2018-06-13 | All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server pr… |
CVE-2018-3582 | High | 7.8 | 2018-06-12 | Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox O… |
CVE-2018-5803 | Medium | 5.5 | 2018-06-12 | In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk… |
CVE-2018-2424 | Critical | 9.8 | 2018-06-12 | SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that… |
CVE-2018-1103 | Medium | 6.1 | 2018-06-12 | Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using… |
CVE-2011-4182 | High | 7.3 | 2018-06-12 | Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected r… |
CVE-2018-1070 | Medium | 6.5 | 2018-06-12 | routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought… |
CVE-2018-5176 | Medium | 6.1 | 2018-06-11 | The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScri… |
CVE-2018-5173 | Medium | 5.3 | 2018-06-11 | The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscu… |
CVE-2018-5170 | Medium | 4.3 | 2018-06-11 | It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is… |
CVE-2018-5169 | Medium | 6.5 | 2018-06-11 | If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-… |
CVE-2018-5167 | Medium | 4.3 | 2018-06-11 | The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks i… |
CVE-2018-5161 | Medium | 4.3 | 2018-06-11 | Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5… |
CVE-2018-5141 | High | 8.2 | 2018-06-11 | A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This coul… |
CVE-2018-5138 | Medium | 5.3 | 2018-06-11 | A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser panel inside another… |
CVE-2018-5136 | High | 7.5 | 2018-06-11 | A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy. This vulnerabilit… |
CVE-2018-5130 | High | 8.8 | 2018-06-11 | When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulner… |
CVE-2018-5121 | Medium | 5.3 | 2018-06-11 | Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an Internationalized Domai… |
CVE-2018-5111 | Medium | 6.5 | 2018-06-11 | When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the o… |
CVE-2018-5110 | Medium | 5.3 | 2018-06-11 | If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firef… |
CVE-2017-7838 | Medium | 5.3 | 2018-06-11 | Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punycode display instea… |
CVE-2017-7837 | Medium | 5.3 | 2018-06-11 | SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox < 57. |
CVE-2017-7833 | Medium | 5.3 | 2018-06-11 | Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on… |
CVE-2017-7832 | Medium | 5.3 | 2018-06-11 | The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the addressba… |
CVE-2017-7829 | Medium | 5.3 | 2018-06-11 | It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed i… |
CVE-2017-7825 | Medium | 5.3 | 2018-06-11 | Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name… |
CVE-2017-7817 | Medium | 5.3 | 2018-06-11 | A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake address bar to be displayed. This allows… |
CVE-2017-7816 | Medium | 5.3 | 2018-06-11 | WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavior. This v… |
CVE-2017-7815 | Medium | 5.3 | 2018-06-11 | On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's… |
CVE-2017-7814 | High | 7.8 | 2018-06-11 | File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its bl… |
CVE-2017-7807 | High | 8.1 | 2018-06-11 | A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requir… |
CVE-2017-7804 | High | 7.5 | 2018-06-11 | The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary d… |
CVE-2017-7796 | Medium | 4.7 | 2018-06-11 | On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to th… |
CVE-2017-7791 | Medium | 5.3 | 2018-06-11 | On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoo… |
CVE-2017-7783 | High | 7.5 | 2018-06-11 | If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resulting modal prompt will… |
CVE-2017-7770 | Medium | 5.9 | 2018-06-11 | A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendered. This would allow… |
CVE-2017-7765 | High | 7.5 | 2018-06-11 | The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, t… |
CVE-2017-7764 | Medium | 5.3 | 2018-06-11 | Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as th… |
CVE-2017-7763 | Medium | 5.3 | 2018-06-11 | Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing at… |
CVE-2017-7762 | High | 7.5 | 2018-06-11 | When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domai… |
CVE-2017-5463 | Medium | 5.3 | 2018-06-11 | Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addres… |
CVE-2017-5453 | Medium | 4.3 | 2018-06-11 | A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. T… |
CVE-2017-5452 | Medium | 4.3 | 2018-06-11 | Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page elem… |
CVE-2017-5451 | Medium | 4.3 | 2018-06-11 | A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text dis… |
CVE-2017-5450 | High | 7.5 | 2018-06-11 | A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI. On Firefox for Android, the base domain is parsed incorrectly, making the re… |
CVE-2017-5449 | High | 7.5 | 2018-06-11 | A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects… |
CVE-2017-5422 | High | 7.5 | 2018-06-11 | If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink i… |
CVE-2017-5421 | High | 7.5 | 2018-06-11 | A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loade… |
CVE-2017-5420 | Medium | 6.5 | 2018-06-11 | A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an… |
CVE-2017-5417 | Medium | 5.3 | 2018-06-11 | When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed locati… |
CVE-2017-5415 | Medium | 5.3 | 2018-06-11 | An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofin… |
CVE-2017-5395 | Medium | 4.3 | 2018-06-11 | Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navi… |
CVE-2017-5383 | Medium | 5.3 | 2018-06-11 | URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks i… |
CVE-2016-9901 | Critical | 9.8 | 2018-06-11 | HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unpr… |
CVE-2016-9076 | Medium | 5.9 | 2018-06-11 | An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be e… |
CVE-2016-9065 | High | 7.5 | 2018-06-11 | The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar withou… |
CVE-2016-5298 | Medium | 6.5 | 2018-06-11 | A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is load… |
CVE-2016-5294 | Medium | 5.5 | 2018-06-11 | The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires… |
CVE-2016-5293 | Medium | 5.5 | 2018-06-11 | When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This… |
CVE-2016-5292 | Medium | 6.5 | 2018-06-11 | During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50. |
CVE-2016-5291 | Medium | 5.5 | 2018-06-11 | A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 4… |
CVE-2018-6515 | High | 7.8 | 2018-06-11 | Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted config… |
CVE-2011-4181 | High | 7.5 | 2018-06-11 | A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE… |
CVE-2018-12108 | Medium | 5.5 | 2018-06-11 | An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE… |
CVE-2018-12025 | High | 7.5 | 2018-06-11 | The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfe… |
CVE-2018-12088 | High | 7.5 | 2018-06-10 | S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the… |
CVE-2018-4250 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to caus… |
CVE-2018-4247 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It… |
CVE-2018-4240 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before… |
CVE-2018-4225 | Medium | 5.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4205 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to s… |
CVE-2018-4202 | Medium | 5.9 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It… |
CVE-2018-4198 | Medium | 5.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before… |
CVE-2018-4188 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4187 | Medium | 6.5 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves… |
CVE-2014-0593 | High | 7.8 | 2018-06-08 | The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this scri… |
CVE-2018-12065 | Critical | 9.8 | 2018-06-08 | A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP c… |
CVE-2018-12046 | High | 7.5 | 2018-06-08 | DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str param… |
CVE-2018-12041 | High | 7.5 | 2018-06-08 | An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 8… |
CVE-2018-0355 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scr… |
CVE-2018-0338 | High | 7.8 | 2018-06-07 | A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authenticated, local attacker to e… |
CVE-2018-0296 | High | 7.5 | 2018-06-07 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device… |
CVE-2018-0274 | High | 8.8 | 2018-06-07 | A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbitrary shell command… |
CVE-2018-3723 | High | 8.8 | 2018-06-07 | defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the… |
CVE-2018-3719 | High | 8.8 | 2018-06-07 | mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the pro… |
CVE-2017-16226 | Critical | 9.8 | 2018-06-07 | The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global funct… |