CWE-20 · Improper Input Validation (page 79)
Page 79 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15346 | Medium | 4.7 | 2018-02-15 | XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02… |
CVE-2017-15333 | Medium | 4.7 | 2018-02-15 | XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02… |
CVE-2017-18088 | Medium | 4.3 | 2018-02-15 | Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.6 (the fixed v… |
CVE-2017-15699 | Medium | 6.5 | 2018-02-13 | A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able… |
CVE-2017-13229 | Critical | 9.8 | 2018-02-12 | A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703. |
CVE-2018-1000049 | High | 7.5 | 2018-02-09 | Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if… |
CVE-2018-1000026 | High | 7.7 | 2018-02-09 | Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that… |
CVE-2018-1000023 | Medium | 5.3 | 2018-02-09 | Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in… |
CVE-2018-1000021 | Medium | 5.0 | 2018-02-09 | GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuratio… |
CVE-2018-1298 | Medium | 5.9 | 2018-02-09 | A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91… |
CVE-2016-10712 | High | 7.5 | 2018-02-09 | In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be control… |
CVE-2012-5360 | High | 8.8 | 2018-02-08 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file. |
CVE-2012-5359 | High | 8.8 | 2018-02-08 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file. |
CVE-2018-1161 | Critical | 9.8 | 2018-02-08 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not requ… |
CVE-2018-6835 | Critical | 9.8 | 2018-02-08 | node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions. |
CVE-2018-0135 | Medium | 4.3 | 2018-02-08 | A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. Th… |
CVE-2018-0125 | Critical | 9.8 | 2018-02-08 | A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote… |
CVE-2018-0122 | Medium | 4.4 | 2018-02-08 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local atta… |
CVE-2018-0117 | High | 8.6 | 2018-02-08 | A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software could allow an unaut… |
CVE-2018-0113 | High | 8.8 | 2018-02-08 | A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privile… |
CVE-2017-15394 | Medium | 6.5 | 2018-02-07 | Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs… |
CVE-2017-15392 | Medium | 4.3 | 2018-02-07 | Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap… |
CVE-2017-15390 | Medium | 6.5 | 2018-02-07 | Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a… |
CVE-2017-15389 | Medium | 6.5 | 2018-02-07 | An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi… |
CVE-2017-15386 | Medium | 6.5 | 2018-02-07 | Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted… |
CVE-2017-12473 | High | 7.5 | 2018-02-07 | ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong… |
CVE-2018-6788 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b… |
CVE-2018-6787 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b… |
CVE-2018-6786 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b… |
CVE-2018-6785 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6784 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6783 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6782 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6781 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6780 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6779 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6778 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6777 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b… |
CVE-2018-6776 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6775 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6774 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6773 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6772 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6771 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6770 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6769 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6768 | High | 7.8 | 2018-02-06 | In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impa… |
CVE-2018-6759 | Medium | 5.5 | 2018-02-06 | The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchec… |
CVE-2014-5282 | High | 8.1 | 2018-02-06 | Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via… |
CVE-2017-6169 | Medium | 6.8 | 2018-02-06 | In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microker… |
CVE-2018-6633 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6632 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6631 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6630 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6629 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6628 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6627 | High | 7.8 | 2018-02-05 | In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified oth… |
CVE-2018-6626 | High | 7.8 | 2018-02-05 | In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have… |
CVE-2018-6625 | High | 7.8 | 2018-02-05 | In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified oth… |
CVE-2015-5674 | Medium | 6.5 | 2018-02-05 | The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 1… |
CVE-2017-18123 | High | 8.6 | 2018-02-03 | The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerabi… |
CVE-2015-2186 | High | 7.5 | 2018-02-03 | The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead o… |
CVE-2016-0300 | Medium | 5.4 | 2018-02-02 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via… |
CVE-2018-6525 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6524 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6523 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other im… |
CVE-2018-6522 | High | 7.8 | 2018-02-02 | In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other… |
CVE-2017-2296 | Medium | 6.5 | 2018-02-01 | In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role di… |
CVE-2018-0136 | High | 8.6 | 2018-01-31 | A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow an unauthe… |
CVE-2018-6476 | Critical | 9.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input val… |
CVE-2018-6474 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6473 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6472 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6471 | High | 7.8 | 2018-01-31 | In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspeci… |
CVE-2018-6407 | High | 7.5 | 2018-01-30 | An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge… |
CVE-2018-5441 | High | 7.8 | 2018-01-30 | An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal… |
CVE-2011-2902 | Medium | 5.3 | 2018-01-30 | zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows… |
CVE-2018-6360 | High | 8.8 | 2018-01-28 | mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and acc… |
CVE-2017-18077 | High | 7.5 | 2018-01-27 | index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containin… |
CVE-2017-1516 | Medium | 5.4 | 2018-01-26 | IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web sit… |
CVE-2016-2983 | High | 8.1 | 2018-01-26 | IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for… |
CVE-2017-1000402 | Medium | 5.9 | 2018-01-26 | Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified… |
CVE-2017-1000401 | Low | 2.2 | 2018-01-26 | The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API ke… |
CVE-2017-1000397 | Medium | 5.9 | 2018-01-26 | Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL ce… |
CVE-2017-1000394 | High | 7.5 | 2018-01-26 | Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-309… |
CVE-2017-1000391 | High | 7.3 | 2018-01-26 | Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearin… |
CVE-2016-10710 | High | 8.1 | 2018-01-25 | Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authentic… |
CVE-2018-5447 | Critical | 9.8 | 2018-01-25 | An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service… |
CVE-2018-1051 | High | 8.1 | 2018-01-25 | It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()`… |
CVE-2018-6217 | Medium | 5.5 | 2018-01-25 | The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (appl… |
CVE-2018-6209 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified oth… |
CVE-2018-6208 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6207 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6206 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6205 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified… |
CVE-2018-6204 | High | 7.8 | 2018-01-25 | In Max Secure Anti Virus 19.0.3.019,, the driver file (SDActMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other… |
CVE-2018-6203 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-6202 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-6201 | High | 7.8 | 2018-01-25 | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp… |
CVE-2018-1047 | Medium | 5.5 | 2018-01-24 | A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method… |