CWE-20 · Improper Input Validation (page 91)
Page 91 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-8870 | High | 8.1 | 2016-11-04 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disa… |
CVE-2016-8869 | Critical | 9.8 | 2016-11-04 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain… |
CVE-2016-7965 | Medium | 6.5 | 2016-10-31 | DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. (A… |
CVE-2016-8579 | Medium | 4.0 | 2016-10-28 | docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain. |
CVE-2016-6372 | High | 7.5 | 2016-10-28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cis… |
CVE-2016-6360 | High | 7.5 | 2016-10-28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated… |
CVE-2016-6358 | High | 7.5 | 2016-10-28 | A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (… |
CVE-2016-6356 | High | 7.5 | 2016-10-28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote att… |
CVE-2016-1481 | High | 7.5 | 2016-10-28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote att… |
CVE-2016-6445 | Critical | 9.1 | 2016-10-27 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18… |
CVE-2016-6440 | Medium | 6.5 | 2016-10-27 | The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to… |
CVE-2016-6431 | High | 7.5 | 2016-10-27 | A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause… |
CVE-2016-2848 | High | 7.5 | 2016-10-21 | ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malform… |
CVE-2015-3288 | High | 7.8 | 2016-10-16 | mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page taintin… |
CVE-2016-7182 | Critical | 9.8 | 2016-10-14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows… |
CVE-2016-7796 | Medium | 5.5 | 2016-10-13 | The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a noti… |
CVE-2016-7795 | Medium | 5.5 | 2016-10-13 | The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a… |
CVE-2016-8563 | High | 7.5 | 2016-10-13 | Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets… |
CVE-2016-6696 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6694 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6693 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6674 | High | 7.8 | 2016-10-10 | system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380. |
CVE-2016-3937 | High | 7.8 | 2016-10-10 | The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and Med… |
CVE-2016-3936 | High | 7.8 | 2016-10-10 | The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and Med… |
CVE-2016-3920 | Medium | 5.5 | 2016-10-10 | id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote… |
CVE-2015-1000002 | High | 8.2 | 2016-10-06 | Open Proxy in filedownload v1.4 wordpress plugin |
CVE-2016-6433 | High | 8.8 | 2016-10-06 | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via craf… |
CVE-2016-6422 | High | 7.5 | 2016-10-06 | Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs… |
CVE-2016-1454 | Medium | 6.5 | 2016-10-06 | Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to c… |
CVE-2016-6426 | High | 7.5 | 2016-10-05 | The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)… |
CVE-2016-6380 | High | 8.1 | 2016-10-05 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from… |
CVE-2016-6379 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) pa… |
CVE-2016-6384 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via… |
CVE-2016-7907 | Medium | 4.4 | 2016-10-05 | The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, whic… |
CVE-2016-6646 | Critical | 9.8 | 2016-10-05 | The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows… |
CVE-2016-6645 | High | 8.8 | 2016-10-05 | The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows… |
CVE-2016-0913 | Critical | 9.8 | 2016-10-05 | The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x be… |
CVE-2016-8278 | High | 7.5 | 2016-10-03 | Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (devi… |
CVE-2016-8277 | Medium | 6.5 | 2016-10-03 | Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of ser… |
CVE-2016-1244 | High | 8.8 | 2016-10-03 | The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file. |
CVE-2016-1240 | High | 7.8 | 2016-10-03 | The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6… |
CVE-2016-2776 | High | 7.5 | 2016-09-28 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remot… |
CVE-2016-6305 | High | 7.5 | 2016-09-26 | The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by tr… |
CVE-2016-6901 | Medium | 6.5 | 2016-09-26 | Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R00… |
CVE-2016-6153 | Medium | 5.9 | 2016-09-26 | os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information… |
CVE-2016-4972 | Critical | 9.8 | 2016-09-26 | OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-murano… |
CVE-2016-7162 | High | 7.5 | 2016-09-26 | The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attac… |
CVE-2016-3110 | High | 7.5 | 2016-09-26 | mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message conta… |
CVE-2016-5947 | Medium | 5.7 | 2016-09-26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a… |
CVE-2016-3000 | Medium | 4.3 | 2016-09-26 | The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (ser… |
CVE-2016-5174 | Medium | 6.5 | 2016-09-25 | browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen tra… |
CVE-2016-4753 | High | 7.8 | 2016-09-25 | Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in… |
CVE-2016-4728 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers… |
CVE-2016-4722 | Medium | 5.9 | 2016-09-25 | The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cau… |
CVE-2016-4711 | High | 7.5 | 2016-09-25 | CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function c… |
CVE-2016-4706 | Medium | 5.5 | 2016-09-25 | cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors. |
CVE-2016-4701 | Medium | 6.2 | 2016-09-25 | Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variabl… |
CVE-2016-4698 | High | 7.8 | 2016-09-25 | AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, wh… |
CVE-2016-6412 | Medium | 6.5 | 2016-09-24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attack… |
CVE-2016-6411 | High | 7.5 | 2016-09-24 | Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers… |
CVE-2016-6410 | Medium | 6.5 | 2016-09-24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated use… |
CVE-2016-6374 | Critical | 9.8 | 2016-09-22 | Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID C… |
CVE-2016-5284 | High | 7.4 | 2016-09-22 | Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which a… |
CVE-2016-5272 | High | 8.8 | 2016-09-22 | The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 does not properly perform a cast of an unsp… |
CVE-2014-2146 | Medium | 6.5 | 2016-09-22 | The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for exist… |
CVE-2016-6824 | Medium | 6.5 | 2016-09-22 | Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of servic… |
CVE-2016-5418 | High | 7.5 | 2016-09-21 | The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to a… |
CVE-2016-4809 | High | 7.5 | 2016-09-21 | The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of… |
CVE-2015-8932 | Medium | 5.5 | 2016-09-20 | The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (cr… |
CVE-2015-8930 | High | 7.5 | 2016-09-20 | bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself. |
CVE-2015-8923 | Medium | 6.5 | 2016-09-20 | The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of… |
CVE-2016-1483 | High | 7.5 | 2016-09-19 | Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component… |
CVE-2016-6405 | Medium | 6.5 | 2016-09-18 | Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge inter… |
CVE-2016-7417 | Critical | 9.8 | 2016-09-17 | ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which al… |
CVE-2016-6302 | High | 7.5 | 2016-09-16 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows re… |
CVE-2016-3378 | High | 7.4 | 2016-09-14 | Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cum… |
CVE-2016-3292 | Medium | 5.0 | 2016-09-14 | Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism v… |
CVE-2016-6399 | High | 7.5 | 2016-09-12 | Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause… |
CVE-2016-6396 | Medium | 5.3 | 2016-09-12 | Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attacker… |
CVE-2016-4852 | Medium | 6.5 | 2016-09-12 | YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on O… |
CVE-2016-7129 | Critical | 9.8 | 2016-09-12 | The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmenta… |
CVE-2016-1277 | Medium | 5.9 | 2016-09-09 | Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40… |
CVE-2016-1263 | High | 7.5 | 2016-09-09 | Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 befor… |
CVE-2016-1464 | High | 7.8 | 2016-09-03 | Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva093… |
CVE-2016-5879 | High | 8.8 | 2016-09-02 | MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availa… |
CVE-2016-1472 | High | 7.5 | 2016-09-02 | The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (inter… |
CVE-2016-5675 | Critical | 9.8 | 2016-08-31 | handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surve… |
CVE-2016-5674 | Critical | 9.8 | 2016-08-31 | __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1… |
CVE-2016-1484 | High | 7.5 | 2016-08-23 | Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vec… |
CVE-2016-6361 | Medium | 6.5 | 2016-08-22 | The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3… |
CVE-2016-1479 | High | 7.5 | 2016-08-22 | Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug I… |
CVE-2016-1365 | High | 8.8 | 2016-08-18 | The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute… |
CVE-2016-3304 | High | 7.8 | 2016-08-09 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skyp… |
CVE-2016-3303 | High | 7.8 | 2016-08-09 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skyp… |
CVE-2016-3301 | High | 7.8 | 2016-08-09 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windo… |
CVE-2016-0281 | Low | 3.7 | 2016-08-08 | The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial o… |
CVE-2016-1478 | High | 7.5 | 2016-08-08 | Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of serv… |
CVE-2016-1430 | High | 8.8 | 2016-08-08 | Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592. |
CVE-2016-6515 | High | 7.5 | 2016-08-07 | The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote atta… |
CVE-2016-5340 | High | 7.8 | 2016-08-07 | The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandle… |