CWE-20

High likelihood

Improper Input Validation

Parent: CWE-707 - Improper Neutralization

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

12,470 vulnerabilities with CWE-20
CVE-2021-25510 MEDIUM
FilterProvider <SMR Dec-2021 Release 1 - RCE
CVSS 5.3
CVE-2021-37096 HIGH
HarmonyOS < 2.0 - Unprotected User Data Exposure via Improper Input Validation
CVSS 7.5
CVE-2021-37094 HIGH
HarmonyOS < 2.0 - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37084 CRITICAL
HarmonyOS < 2.0 - Improper Input Validation in Smart Assistant Text Message Handling
CVSS 9.8
CVE-2021-37081 HIGH
HarmonyOS < 2.0 - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37060 HIGH
HarmonyOS < 2.0 - Heap Address Leakage via SAMGR Input Validation
CVSS 7.5
CVE-2021-37048 HIGH
HarmonyOS < 2.0 - Improper Input Validation
CVSS 7.5
CVE-2021-37047 HIGH
Huawei EMUI and Magic UI - Denial of Service via Input Verification Vulnerability
CVSS 7.5
CVE-2021-20611 HIGH
Mitsubishi Electric MELSEC iQ-R - Info Disclosure
CVSS 7.5
CVE-2021-26612 HIGH
Nexacro < 17.1.2.500 - Arbitrary File Creation and Remote Code Execution via Copy Method
CVSS 8.1
CVE-2021-42122 MEDIUM
TopEase <= 7.1.27 - Authenticated Denial of Service via Numeric Attribute Format Injection
CVSS 4.3
CVE-2021-42121 MEDIUM
TopEase <= 7.1.27 - Authenticated Denial of Service via Date Field Input Validation
CVSS 4.3
CVE-2021-42120 MEDIUM
TopEase <= 7.1.27 - Authenticated Uncontrolled Resource Consumption via Object Attribute Input
CVSS 6.5
CVE-2021-42117 LOW
TopEase <= 7.1.27 - Authenticated Stored Cross-Site Scripting via Insufficient Input Validation
CVSS 3.5
CVE-2021-3802 MEDIUM
udisks < 2.9.4 - Denial of Service via Crafted Image File
CVSS 4.2
CVE-2021-35533 HIGH
Hitachi Energy RTU500 CMU Firmware 12.0.*, 12.2.*, 12.4.* - Denial of Service via APDU Parser Input Validation
CVSS 7.5
CVE-2021-38000 MEDIUM KEV
Google Chrome <95.0.4638.69 - Open Redirect
CVSS 6.1
CVE-2021-36335 MEDIUM
Dell EMC CloudLink <7.1 - Buffer Overflow
CVSS 4.3
CVE-2021-24894 MEDIUM
Reviews Plus < 1.2.14 - Authenticated Denial of Service via Rating Submission
CVSS 6.5
CVE-2021-37026 HIGH
HarmonyOS - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37025 HIGH
HarmonyOS - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37024 HIGH
HarmonyOS - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37019 HIGH
HarmonyOS - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37017 HIGH
HarmonyOS - Denial of Service via Improper Input Validation
CVSS 7.5
CVE-2021-37013 MEDIUM
Huawei HarmonyOS - Denial of Service via Improper Input Validation
CVSS 5.3
Details
Vulnerabilities 12,470
Exploit Likelihood High