The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,467 vulnerabilities with CWE-20
CVE-2022-47185
HIGH
Apache Traffic Server <9.2.1 - Info Disclosure
CVSS 7.5
CVE-2022-4925
MEDIUM
Google Chrome < 97.0.4692.71 - Header Splitting via QUIC Input Validation
CVSS 6.5
CVE-2022-4911
MEDIUM
Chrome < 106.0.5249.62 - Content Security Policy Bypass via DevTools
CVSS 6.5
CVE-2022-43713
HIGH
GX Software XperienCentral <10.35.0 - Info Disclosure
CVSS 7.5
CVE-2022-2502
HIGH
HitachiEnergy RTU500 Firmware - Denial of Service via Crafted IEC 60870-5-104 Message
CVSS 7.5
CVE-2022-43908
MEDIUM
IBM Security Guardium 11.3 - Authenticated Denial of Service via Improper Input Validation
CVSS 4.3
CVE-2022-31810
HIGH
SiPass integrated < 2.90.3.8 - Unauthenticated Denial of Service via Configuration Client Login Packet
CVSS 7.5
CVE-2022-29562
LOW
Siemens RUGGEDCOM ROX Firmware < 2.16.0 - Unauthenticated Denial of Service via Malformed HTTP Packet
CVSS 3.7
CVE-2022-4332
MEDIUM
Sprecher Automation SPRECON-E-C/P/T3 PU244x - Code Injection
CVSS 6.8
CVE-2022-47392
MEDIUM
CODESYS Control Runtime - Authenticated Denial of Service via CmpApp Component Input Validation
CVSS 6.5
CVE-2022-47937
CRITICAL
Apache Sling Commons JSON < 2.0.20 - Denial of Service via Crafted Input
CVSS 9.8
CVE-2022-47391
HIGH
CODESYS Control SL < 4.8.0.0 - Unauthenticated Denial of Service via Invalid Address Read
CVSS 7.5
CVE-2022-47378
MEDIUM
CODESYS Control Runtime < 4.8.0.0 - Authenticated Denial of Service via Improper Input Validation
CVSS 6.5
CVE-2022-22508
MEDIUM
CODESYS V3 Control Products - Authenticated Denial of Service via Login Blocking
CVSS 4.3
CVE-2022-38787
MEDIUM
Intel(R) FPGA <2.7.0 - Privilege Escalation
CVSS 5.7
CVE-2022-37327
MEDIUM
Intel NUC BIOS Firmware < fncml357.0059 - Information Disclosure via Improper Input Validation
CVSS 6.1
CVE-2022-36339
HIGH
Intel(R) NUC - Privilege Escalation
CVSS 7.5
CVE-2022-34147
HIGH
Intel(R) NUC - Privilege Escalation
CVSS 7.5
CVE-2022-33894
HIGH
Intel(R) Processors - Privilege Escalation
CVSS 7.5
CVE-2022-32766
HIGH
Intel Compute Stick STK2MV64CC Firmware < ccsKLM5v.0067 - Privilege Escalation via Improper Input Validation
CVSS 7.2
CVE-2022-32577
LOW
Intel NUC 5CPYH/5PGYH/5PPYH Firmware < PY0081 - DoS or Info Disclosure via BIOS Input Validation
CVSS 3.4
CVE-2022-28699
HIGH
Intel(R) NUC BIOS - Privilege Escalation
CVSS 7.5
CVE-2022-25976
MEDIUM
Intel VROC < 7.7.6.1003 - Authenticated Denial of Service via Improper Input Validation
CVSS 5.5
CVE-2022-23818
HIGH
AMD EPYC Firmware - Loss of SEV-SNP Guest Memory Integrity via VM_HSAVE_PA Register
CVSS 7.5
CVE-2022-43919
MEDIUM
IBM MQ Appliance 9.2.0.0-9.2.0.9 and 9.2.0.0-9.2.5.6 - Authenticated Denial of Service via Crafted Messages
CVSS 5.3
Details
Vulnerabilities
12,467
Exploit Likelihood
High