The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,440 vulnerabilities with CWE-20
CVE-2025-62525
HIGH
OpenWrt < 24.10.4 - Out-of-bounds Read and Write via ltq-ptm Driver ioctls
CVSS 7.9
CVE-2025-12001
MEDIUM
BLU-IC2 and BLU-IC4 Firmware < 1.20 - Stored Cross-Site Scripting via Application Manifest
CVSS 6.1
CVE-2025-26781
HIGH
Samsung Exynos and Modem Firmware - Denial of Service in L2 RLC AM PDU Handling
CVSS 7.5
CVE-2025-11938
MEDIUM
ChurchCRM < 5.18.0 - Remote Code Execution via Setup Route Deserialization
CVSS 5.6
CVE-2025-8414
CRITICAL
Zigbee EZSP Host Apps - Buffer Overflow
CVE-2025-60537
MEDIUM
kafka-ui 0.6.0-0.7.2 - Remote Code Execution via CustomSerdeLoader Input Validation
CVSS 6.5
CVE-2025-59250
HIGH
JDBC Driver for SQL Server 10.2.0-10.2.4 and 8.3.0.jre11-preview-10.2.4.jre11 - Spoofing via Improper Input Validation
CVSS 8.1
CVE-2025-59248
HIGH
Microsoft Exchange Server - Spoofing via Improper Input Validation
CVSS 7.5
CVE-2025-59228
HIGH
Microsoft SharePoint Server - Remote Code Execution via Improper Input Validation
CVSS 8.8
CVE-2025-59207
HIGH
Windows Kernel < - Privilege Escalation
CVSS 7.8
CVE-2025-59198
MEDIUM
Windows Search Component - Denial of Service via Improper Input Validation
CVSS 5.0
CVE-2025-59190
MEDIUM
Windows 10 1507-22H2, Windows 11 22H2-25H2, Windows Server 2008 - Unauthenticated Denial of Service in Search Component
CVSS 5.5
CVE-2025-59187
HIGH
Windows Kernel - Privilege Escalation
CVSS 7.8
CVE-2025-58716
HIGH
Microsoft Windows Speech - Privilege Escalation
CVSS 8.8
CVE-2025-55692
HIGH
Windows Error Reporting - Privilege Escalation
CVSS 7.8
CVE-2025-55679
MEDIUM
Windows Kernel - Unauthenticated Information Disclosure via Improper Input Validation
CVSS 5.1
CVE-2025-9066
HIGH
FactoryTalk ViewPoint - Unauthenticated XML External Entity Injection via SOAP Requests
CVE-2025-31995
LOW
HCL Unica MaxAI Workbench - Improper Input Validation
CVSS 3.5
CVE-2025-62162
HIGH
cel-rust 0.10.0-0.11.3 - Denial of Service via Malformed CEL Expression Parsing
CVSS 7.5
CVE-2025-61920
HIGH
Authlib < 1.6.5 - Uncontrolled Resource Consumption via Oversized JWS/JWT Segments
CVSS 7.5
CVE-2025-27040
MEDIUM
Hypervisor Log Processing - Info Disclosure
CVSS 6.5
CVE-2025-61768
MEDIUM
KUNO CMS < 1.3.15 - Authenticated Server-Side Request Forgery via SVG File Upload
CVE-2025-11346
MEDIUM
ILIAS <8.23/9.13/10.1 - Deserialization
CVSS 6.3
CVE-2025-11345
MEDIUM
ILIAS <8.23/9.13/10.1 - Deserialization
CVSS 5.5
CVE-2025-11273
MEDIUM
LaChatterie Verger <= 1.2.10 - Remote Code Execution via OAuth Provider URL Deserialization
CVSS 6.3
Details
Vulnerabilities
12,440
Exploit Likelihood
High