CWE-20

High likelihood

Improper Input Validation

Parent: CWE-707 - Improper Neutralization

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

12,467 vulnerabilities with CWE-20
CVE-2022-41836 HIGH
F5 F5 BIG-IP Advanced WAF and ASM - Denial of Service via Attack Signature False Positive Mode
CVSS 7.5
CVE-2022-41813 MEDIUM
BIG-IP <16.1.3.1, <15.1.6.1, <14.1.5, 13.1.x - DoS
CVSS 6.5
CVE-2022-41694 MEDIUM
BIG-IP <16.1.3,15.1.6.1,14.1.5,13.1.x - DoS
CVSS 4.9
CVE-2022-1414 HIGH
3scale API Management 2 - Authenticated Cross-Site Scripting via Inadequate Input Sanitization
CVSS 8.8
CVE-2022-22247 HIGH
Juniper Networks Junos OS Evolved <21.3R3-EVO-21.4 - DoS
CVSS 7.5
CVE-2022-22243 MEDIUM
Juniper Networks Junos OS <19.1R3-S9-20 - XPath Injection
CVSS 4.3
CVE-2022-22241 HIGH
Juniper Junos OS Multiple Versions - Unauthenticated Deserialization via J-Web POST Request
CVSS 8.1
CVE-2022-22230 MEDIUM
Juniper Networks Junos OS <19.2R3-S6 - DoS
CVSS 6.5
CVE-2022-22228 HIGH
Juniper Networks Junos OS <21.1R3-S2-21.4 - DoS
CVSS 7.5
CVE-2022-22223 MEDIUM
Juniper Junos OS on QFX10000 Series - Denial of Service via Transit IP/MPLS PHP Packets
CVSS 6.5
CVE-2022-22201 HIGH
Juniper Junos OS DoS via Malformed ESP Packet
CVSS 7.5
CVE-2022-22192 HIGH
Juniper Networks Junos OS Evolved - DoS
CVSS 7.5
CVE-2022-23770 HIGH
wisa smart_wing_cms < 19051 - Remote Command Execution via API Constructor Parameter
CVSS 8.8
CVE-2022-42340 HIGH
Adobe ColdFusion Update 14 and earlier - Arbitrary File System Read via Improper Input Validation
CVSS 7.5
CVE-2022-38985 HIGH
Facial Recognition Module - Info Disclosure
CVSS 7.5
CVE-2022-3171 MEDIUM
Google Protobuf < 3.21.7, 3.20.3, 3.19.6, 3.16.3 - Denial of Service via Binary Data Parsing
CVSS 4.3
CVE-2022-32489 HIGH
Dell Alienware BIOS < 1.21.0 (Area-51m R1) - Authenticated Arbitrary Code Execution in SMRAM via SMI
CVSS 8.2
CVE-2022-32488 HIGH
Dell Alienware Area 51m R1 Firmware - Improper Input Validation
CVSS 8.2
CVE-2022-32487 HIGH
Dell Alienware Area 51m R1 Firmware - Improper Input Validation
CVSS 7.5
CVE-2022-32485 HIGH
Dell Alienware Area 51m R1 Firmware - Improper Input Validation
CVSS 7.5
CVE-2022-32484 MEDIUM
Dell Alienware Area 51m R1 Firmware - Improper Input Validation
CVSS 5.6
CVE-2022-32483 MEDIUM
Dell Alienware Area 51m R1 Firmware - Improper Input Validation
CVSS 5.6
CVE-2022-41606 MEDIUM
HashiCorp Nomad <1.2.12, <1.3.5 - DoS
CVSS 6.5
CVE-2022-3140 MEDIUM
LibreOffice <7.4.1 and <7.3.6 - Macro Execution via Office URI Scheme
CVSS 6.3
CVE-2022-32492 HIGH
Dell BIOS < 2.21.0 - Authenticated Arbitrary Code Execution in SMRAM via SMI
CVSS 7.5
Details
Vulnerabilities 12,467
Exploit Likelihood High