CWE-20 · Improper Input Validation (page 86)
Page 86 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8555 | Medium | 4.3 | 2017-06-15 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy… |
CVE-2017-8545 | Medium | 6.5 | 2017-06-15 | A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability". |
CVE-2017-7676 | Critical | 9.8 | 2017-06-14 | Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended… |
CVE-2017-7369 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corru… |
CVE-2017-7366 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters. |
CVE-2016-10338 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing. |
CVE-2016-10337 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed. |
CVE-2015-9033 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer. |
CVE-2014-9965 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call. |
CVE-2014-9962 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command. |
CVE-2017-6690 | Medium | 4.9 | 2017-06-13 | A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authe… |
CVE-2017-6680 | High | 7.5 | 2017-06-13 | A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directori… |
CVE-2017-6674 | High | 7.5 | 2017-06-13 | A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass UR… |
CVE-2017-6671 | High | 7.5 | 2017-06-13 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacke… |
CVE-2017-6667 | Critical | 9.8 | 2017-06-13 | A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remo… |
CVE-2017-6656 | Medium | 5.9 | 2017-06-13 | A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cau… |
CVE-2017-4994 | High | 7.5 | 2017-06-13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3… |
CVE-2017-2773 | Critical | 9.8 | 2017-06-13 | An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9… |
CVE-2016-8218 | Critical | 9.8 | 2017-06-13 | An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic i… |
CVE-2017-2179 | High | 8.8 | 2017-06-09 | Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors, a different vulnera… |
CVE-2016-7821 | Medium | 6.5 | 2017-06-09 | Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspeci… |
CVE-2015-3913 | High | 7.5 | 2017-06-08 | The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message. |
CVE-2015-1379 | High | 7.5 | 2017-06-08 | The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash). |
CVE-2014-3498 | High | 8.8 | 2017-06-08 | The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. |
CVE-2017-9022 | High | 7.5 | 2017-06-08 | The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial o… |
CVE-2017-6638 | High | 7.8 | 2017-06-08 | A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install an… |
CVE-2015-8538 | Medium | 6.5 | 2017-06-07 | dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). |
CVE-2015-5175 | High | 7.5 | 2017-06-07 | Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service. |
CVE-2016-9977 | High | 8.8 | 2017-06-07 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session… |
CVE-2016-6087 | Critical | 9.8 | 2017-06-07 | IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation… |
CVE-2017-7564 | High | 7.5 | 2017-06-07 | In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world p… |
CVE-2015-3830 | Medium | 6.5 | 2017-06-06 | The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by di… |
CVE-2017-1000368 | High | 8.2 | 2017-06-05 | Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in inf… |
CVE-2017-7669 | High | 7.5 | 2017-06-05 | In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the do… |
CVE-2017-9354 | High | 7.5 | 2017-06-02 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 addr… |
CVE-2017-9353 | High | 7.5 | 2017-06-02 | In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address. |
CVE-2017-9350 | High | 7.5 | 2017-06-02 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-op… |
CVE-2017-9334 | High | 7.5 | 2017-06-01 | An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows… |
CVE-2017-4897 | Medium | 5.5 | 2017-05-31 | VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking Da… |
CVE-2017-9303 | Medium | 6.1 | 2017-05-29 | Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishin… |
CVE-2017-9263 | Medium | 6.5 | 2017-05-29 | In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the fu… |
CVE-2017-9242 | Medium | 5.5 | 2017-05-27 | The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structur… |
CVE-2017-3134 | High | 7.2 | 2017-05-27 | An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running… |
CVE-2017-9034 | Critical | 9.8 | 2017-05-26 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privilege… |
CVE-2016-2165 | Medium | 6.5 | 2017-05-25 | The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic Runtime versions prior to 1.5.19 AND 1.6.x versions prior to 1.6.20… |
CVE-2017-0373 | High | 7.3 | 2017-05-23 | The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" lin… |
CVE-2017-9188 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63. |
CVE-2016-5178 | Critical | 9.8 | 2017-05-23 | Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact vi… |
CVE-2015-5401 | High | 7.5 | 2017-05-23 | Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers t… |
CVE-2017-9144 | Medium | 6.5 | 2017-05-22 | In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. |
CVE-2017-9142 | Medium | 6.5 | 2017-05-22 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the R… |
CVE-2017-9141 | Medium | 6.5 | 2017-05-22 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of miss… |
CVE-2017-2540 | Medium | 5.5 | 2017-05-22 | An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to by… |
CVE-2017-2535 | High | 7.8 | 2017-05-22 | An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Security" component. It allows attackers to conduc… |
CVE-2017-2511 | Medium | 6.5 | 2017-05-22 | An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to s… |
CVE-2017-2500 | Medium | 4.7 | 2017-05-22 | An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to s… |
CVE-2017-2495 | Medium | 6.5 | 2017-05-22 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component… |
CVE-2017-6650 | High | 7.8 | 2017-05-22 | A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, l… |
CVE-2017-6649 | High | 7.8 | 2017-05-22 | A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker t… |
CVE-2017-6637 | Medium | 6.5 | 2017-05-22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker t… |
CVE-2017-9131 | High | 7.5 | 2017-05-21 | An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. By connecting to the Mosquitto broker on an access point… |
CVE-2017-9046 | High | 7.3 | 2017-05-21 | winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp… |
CVE-2017-9091 | High | 7.5 | 2017-05-19 | /admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha']. |
CVE-2017-9090 | High | 7.5 | 2017-05-19 | reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha']. |
CVE-2017-6652 | High | 7.5 | 2017-05-18 | A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an af… |
CVE-2017-9065 | High | 7.5 | 2017-05-18 | In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API. |
CVE-2017-9043 | High | 7.8 | 2017-05-18 | readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of ser… |
CVE-2017-8849 | High | 7.8 | 2017-05-17 | smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. |
CVE-2017-5215 | Critical | 9.8 | 2017-05-17 | The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechan… |
CVE-2017-3873 | High | 7.5 | 2017-05-16 | A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or… |
CVE-2017-3825 | High | 7.5 | 2017-05-16 | A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacke… |
CVE-2014-9933 | High | 7.8 | 2017-05-16 | Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access. |
CVE-2017-7478 | High | 7.5 | 2017-05-15 | OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed… |
CVE-2017-8934 | Medium | 5.5 | 2017-05-15 | PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability). |
CVE-2017-8933 | Low | 3.3 | 2017-05-15 | Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability). |
CVE-2017-7213 | Critical | 10.0 | 2017-05-15 | Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors. |
CVE-2016-4838 | High | 7.8 | 2017-05-12 | The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior to v1.2.0), Money Fo… |
CVE-2017-0620 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code with… |
CVE-2017-0613 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute… |
CVE-2017-0280 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0273 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0269 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0256 | Medium | 5.3 | 2017-05-12 | A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0249 | High | 7.3 | 2017-05-12 | An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0247 | High | 7.5 | 2017-05-12 | A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims… |
CVE-2017-0231 | Medium | 4.3 | 2017-05-12 | A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability." |
CVE-2017-0212 | High | 7.6 | 2017-05-12 | Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly v… |
CVE-2017-0171 | Medium | 5.9 | 2017-05-12 | Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Ser… |
CVE-2017-5948 | Medium | 5.9 | 2017-05-11 | An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater… |
CVE-2016-7476 | High | 7.5 | 2017-05-11 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 bef… |
CVE-2017-6867 | Medium | 4.9 | 2017-05-11 | A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 be… |
CVE-2017-6865 | Medium | 6.5 | 2017-05-11 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Softwa… |
CVE-2016-10371 | Medium | 5.5 | 2017-05-10 | The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure an… |
CVE-2017-0355 | Medium | 5.5 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memo… |
CVE-2017-0354 | Medium | 4.7 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain functi… |
CVE-2017-0353 | Medium | 5.5 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certai… |
CVE-2017-0350 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not co… |
CVE-2017-0346 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size… |
CVE-2016-9253 | High | 7.5 | 2017-05-09 | In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket p… |
CVE-2016-6877 | Medium | 5.3 | 2017-05-05 | Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a c… |