CWE-20

High likelihood

Improper Input Validation

Parent: CWE-707 - Improper Neutralization

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

12,596 vulnerabilities with CWE-20
CVE-2018-11950 HIGH
Snapdragon Mobile <SD 845-SD 850 - Privilege Escalation
CVSS 7.8
CVE-2018-7432 HIGH
Splunk < 6.6.0 - Improper Input Validation
CVSS 7.5
CVE-2018-7429 HIGH
Splunk Enterprise 6.2.0-6.2.13, 6.3.0-6.3.10, 6.4.0-6.4.7 & Light <6.5.0 DoS via Malformed HTTP Request
CVSS 7.5
CVE-2018-14820 HIGH
Advantech WebAccess <8.3.1 - Path Traversal
CVSS 7.5
CVE-2018-13115 MEDIUM
KERUI Wifi Endoscope Camera YPC99 - Unauthenticated Camera Stream Manipulation via RTSP Commands
CVSS 6.5
CVE-2018-18541 HIGH
Teeworlds < 0.6.5 - Unauthenticated Connection Spoofing via Forged Packets
CVSS 7.5
CVE-2018-5156 CRITICAL
Thunderbird <60 - Buffer Overflow
CVSS 9.8
CVE-2018-12387 CRITICAL
Firefox < 62.0.3 - Memory Corruption
CVSS 9.1
CVE-2018-12385 HIGH
Firefox - Use After Free
CVSS 7.0
CVE-2018-12382 MEDIUM
Firefox for Android <62 - Info Disclosure
CVSS 5.3
CVE-2018-12367 MEDIUM
Thunderbird <60 - Info Disclosure
CVSS 4.3
CVE-2018-0443 HIGH
Cisco Wireless LAN Controller Software - Denial of Service via CAPWAP Discovery Request Packet
CVSS 7.5
CVE-2018-0378 HIGH
Cisco NX-OS - Unauthenticated Denial of Service via PTP Frame Flood
CVSS 8.6
CVE-2018-0456 HIGH
Cisco NX-OS - Denial of Service via SNMP PDU Input Validation
CVSS 7.7
CVE-2018-0416 MEDIUM
Cisco Wireless LAN Controller Software - Unauthenticated Information Disclosure via Web Interface URL Request
CVSS 5.3
CVE-2018-0395 HIGH
Cisco NX-OS and FXOS - Denial of Service via LLDP TLV Field Input Validation
CVSS 8.8
CVE-2018-12153 MEDIUM
Intel Graphics Drivers <10.18.x.5056-20.19.x.5058 - DoS
CVSS 6.5
CVE-2018-0062 MEDIUM
Junos OS - Unauthenticated Denial of Service via J-Web Service
CVSS 5.3
CVE-2018-0060 MEDIUM
Juniper Junos OS - Denial of Service via DHCP IP Address Request
CVSS 5.3
CVE-2018-0058 MEDIUM
Junos OS 15.1-18.2 - Denial of Service via Crafted IPv6 Exception Packet
CVSS 5.9
CVE-2018-0056 MEDIUM
Juniper Junos OS - Denial of Service in L2ALD via Duplicate MAC Address Handling
CVSS 6.5
CVE-2018-0055 MEDIUM
Junos OS 15.1-18.2X75 - Denial of Service via Crafted DHCPv6 Message
CVSS 6.5
CVE-2018-0051 HIGH
Junos OS Multiple Versions - Denial of Service via SIP ALG
CVSS 7.5
CVE-2018-0050 HIGH
Juniper Junos OS 14.1-14.2 - Denial of Service via Malformed MPLS RSVP Packet
CVSS 7.5
CVE-2018-0045 HIGH
Junos OS Multiple Versions - Remote Code Execution or Denial of Service via Draft-Rosen MVPN
CVSS 8.8
Details
Vulnerabilities 12,596
Exploit Likelihood High