CWE-20 · Improper Input Validation (page 87)
Page 87 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9692 | High | 8.6 | 2017-05-05 | IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input… |
CVE-2017-3733 | High | 7.5 | 2017-05-04 | During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause… |
CVE-2017-6620 | Medium | 5.8 | 2017-05-03 | A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote at… |
CVE-2017-7428 | Medium | 5.3 | 2017-05-03 | NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat. |
CVE-2017-6551 | Critical | 9.8 | 2017-05-02 | Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing… |
CVE-2016-10243 | Critical | 9.8 | 2017-05-02 | TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file. |
CVE-2017-8396 | High | 7.5 | 2017-05-01 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing rel… |
CVE-2017-7721 | High | 7.8 | 2017-04-30 | IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file. |
CVE-2017-7957 | High | 7.5 | 2017-04-29 | XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshal… |
CVE-2017-2154 | High | 7.8 | 2017-04-28 | Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST O… |
CVE-2017-2153 | High | 7.5 | 2017-04-28 | SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial… |
CVE-2017-2100 | Medium | 6.3 | 2017-04-28 | Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attacks via unspecified… |
CVE-2017-8288 | High | 8.1 | 2017-04-27 | gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensio… |
CVE-2017-3162 | High | 7.3 | 2017-04-26 | HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apach… |
CVE-2017-8219 | Medium | 6.5 | 2017-04-25 | TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ans… |
CVE-2017-5041 | Medium | 4.3 | 2017-04-24 | Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site v… |
CVE-2017-2340 | Medium | 5.3 | 2017-04-24 | On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subsc… |
CVE-2017-2313 | High | 7.5 | 2017-04-24 | Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process da… |
CVE-2016-3109 | Critical | 9.8 | 2017-04-21 | The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code. |
CVE-2016-2173 | Critical | 9.8 | 2017-04-21 | org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code. |
CVE-2016-4841 | Medium | 4.3 | 2017-04-21 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. |
CVE-2017-7220 | High | 8.8 | 2017-04-21 | OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE dm_dbo.dm_user_s S… |
CVE-2017-6619 | High | 8.8 | 2017-04-20 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary… |
CVE-2017-6616 | High | 8.8 | 2017-04-20 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary… |
CVE-2017-6613 | Medium | 5.8 | 2017-04-20 | A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to… |
CVE-2017-6610 | High | 7.7 | 2017-04-20 | A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload… |
CVE-2016-7536 | Medium | 6.5 | 2017-04-20 | magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile. |
CVE-2016-4862 | High | 8.8 | 2017-04-20 | Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitr… |
CVE-2017-7692 | High | 8.8 | 2017-04-20 | SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in… |
CVE-2017-7283 | High | 8.8 | 2017-04-20 | An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore… |
CVE-2017-7979 | High | 7.8 | 2017-04-19 | The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, w… |
CVE-2014-9907 | Medium | 6.5 | 2017-04-19 | coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. |
CVE-2017-7645 | High | 7.5 | 2017-04-18 | The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long… |
CVE-2017-7892 | High | 7.5 | 2017-04-17 | Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp ap… |
CVE-2017-1161 | High | 7.3 | 2017-04-17 | IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Port… |
CVE-2017-5659 | High | 7.5 | 2017-04-17 | Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding. |
CVE-2016-4868 | Medium | 4.3 | 2017-04-17 | Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via s… |
CVE-2017-6554 | High | 7.2 | 2017-04-14 | pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently… |
CVE-2015-6568 | High | 8.8 | 2017-04-14 | Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent… |
CVE-2015-6567 | High | 8.8 | 2017-04-14 | Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validat… |
CVE-2017-7456 | High | 7.5 | 2017-04-14 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials. |
CVE-2017-7408 | High | 7.5 | 2017-04-14 | Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper validation of requests to revoke a Traps… |
CVE-2017-7218 | High | 7.8 | 2017-04-14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters. |
CVE-2017-7217 | Medium | 4.3 | 2017-04-14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified… |
CVE-2016-4899 | Critical | 9.8 | 2017-04-13 | The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vector… |
CVE-2016-4898 | Critical | 9.8 | 2017-04-13 | The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vector… |
CVE-2015-4646 | High | 7.5 | 2017-04-13 | (1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (appli… |
CVE-2012-1301 | Critical | 9.8 | 2017-04-13 | The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter. |
CVE-2016-2567 | Low | 3.3 | 2017-04-13 | secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to b… |
CVE-2010-1821 | High | 7.8 | 2017-04-13 | Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges. |
CVE-2015-7740 | Medium | 5.5 | 2017-04-13 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash)… |
CVE-2017-7747 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addres… |
CVE-2017-7280 | Critical | 9.8 | 2017-04-12 | An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a pop… |
CVE-2017-6059 | High | 7.5 | 2017-04-12 | Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof pag… |
CVE-2017-2989 | Critical | 9.1 | 2017-04-12 | Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign databas… |
CVE-2017-0197 | High | 7.8 | 2017-04-12 | Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Lo… |
CVE-2017-0186 | Medium | 5.8 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R… |
CVE-2017-0185 | Medium | 5.8 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R… |
CVE-2017-0184 | Medium | 5.4 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest ope… |
CVE-2017-0183 | Medium | 5.8 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 201… |
CVE-2017-0182 | Medium | 5.8 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 201… |
CVE-2017-0181 | High | 7.6 | 2017-04-12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly v… |
CVE-2017-0180 | High | 7.6 | 2017-04-12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticate… |
CVE-2017-0179 | Medium | 5.8 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host serve… |
CVE-2017-0178 | Medium | 5.4 | 2017-04-12 | A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, a… |
CVE-2017-0169 | Medium | 5.4 | 2017-04-12 | An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. or Windows Server 2012 R2 host operating sys… |
CVE-2017-0164 | Medium | 4.4 | 2017-04-12 | A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search quer… |
CVE-2017-0163 | High | 7.6 | 2017-04-12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticate… |
CVE-2017-0162 | High | 7.6 | 2017-04-12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Serve… |
CVE-2016-7958 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists… |
CVE-2016-7957 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors… |
CVE-2015-7893 | High | 8.8 | 2017-04-11 | SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript. |
CVE-2016-7467 | Medium | 5.3 | 2017-04-11 | The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provi… |
CVE-2016-6878 | Critical | 9.8 | 2017-04-10 | The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors rel… |
CVE-2016-1517 | Medium | 5.5 | 2017-04-10 | OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. |
CVE-2017-7613 | Medium | 5.5 | 2017-04-09 | elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (me… |
CVE-2017-7609 | Medium | 5.5 | 2017-04-09 | elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption)… |
CVE-2017-7606 | Medium | 6.5 | 2017-04-09 | coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote… |
CVE-2017-7604 | High | 7.8 | 2017-04-09 | au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service… |
CVE-2017-7601 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (… |
CVE-2017-7600 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a… |
CVE-2017-7599 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7597 | High | 7.8 | 2017-04-09 | tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to… |
CVE-2017-7596 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7592 | High | 7.8 | 2017-04-09 | The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of… |
CVE-2017-3889 | Medium | 6.1 | 2017-04-07 | A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired… |
CVE-2016-9219 | High | 7.5 | 2017-04-06 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to caus… |
CVE-2017-0888 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list… |
CVE-2017-0887 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length… |
CVE-2015-1612 | High | 7.5 | 2017-04-04 | OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP… |
CVE-2015-1611 | High | 7.5 | 2017-04-04 | OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injecti… |
CVE-2017-6181 | High | 7.5 | 2017-04-03 | The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cau… |
CVE-2016-10222 | High | 7.5 | 2017-04-03 | runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of servic… |
CVE-2016-8796 | High | 7.5 | 2017-04-02 | Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected… |
CVE-2016-8773 | High | 7.5 | 2017-04-02 | Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005… |
CVE-2016-8764 | Medium | 6.4 | 2017-04-02 | The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and… |
CVE-2016-8762 | Medium | 5.0 | 2017-04-02 | The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and… |
CVE-2016-8758 | Medium | 5.5 | 2017-04-02 | ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 a… |
CVE-2016-8756 | Medium | 5.5 | 2017-04-02 | ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197… |
CVE-2016-8275 | Medium | 6.5 | 2017-04-02 | Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb. |