The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,638 vulnerabilities with CWE-20
CVE-2013-5480
Cisco IOS 12.2 and 15.0-15.3 - Denial of Service via Crafted IPv4 DNS TCP Stream
CVE-2013-5479
Cisco IOS 12.2 and 15.0-15.3 - Denial of Service via Crafted IPv4 DNS TCP Stream
CVE-2013-5478
Cisco IOS 15.0-15.3 and IOS XE 3.2-3.8 - Denial of Service via Crafted UDP RSVP Packets
CVE-2013-5477
Cisco IOS 12.2 and 15.0-15.3 - Denial of Service via T1/E1 Driver-Queue Interface Wedge
CVE-2013-5476
Cisco IOS 15.1-15.2 - Denial of Service via Crafted IPv4 HTTP Traffic
CVE-2013-5475
Cisco IOS 12.2-12.4 and 15.0-15.3 and IOS XE 2.1-3.9 - Denial of Service via Crafted DHCP Packets
CVE-2013-5472
Cisco IOS 12.0-12.4 and 15.0-15.1 and IOS XE 2.1-3.3 - Denial of Service via MSDP SA Message Handling
CVE-2013-2140
Linux Kernel < 3.10.5 - Denial of Service via Xen blkback Dispatch Discard IO
CVE-2013-1431
Telepathy Gabble < 0.16.6 and 0.17.x < 0.17.4 - TLS Verification Bypass via Legacy Jabber Server Connection
CVE-2013-4053
IBM WebSphere Application Server 6.1-8.5 - Improper Certificate Validation in WS-Security
CVE-2013-5155
iPhone OS < 6.1.4 - Denial of Service via Crafted /dev/random Writes
CVE-2013-5152
iPhone OS < 6.1.4 - URL Bar Spoofing via Crafted Web Site
CVE-2013-5140
iPhone OS < 6.1.4 - Denial of Service via Invalid Packet Fragment
CVE-2013-1735
Firefox < 24.0 - Remote Code Execution via Image-Document Scrolling
CVE-2013-1731
Firefox < 24.0 - Remote Code Execution via GL Tracing Untrusted Search Path
CVE-2013-2788
SUBNET Solutions SubSTATION Server <2.8.0106 - DoS
CVE-2013-5650
Junos Pulse Secure Access Service 7.1-7.4 & Access Control Service 4.1-4.4 DoS via Crafted Packet
CVE-2013-4180
Redhat Openstack < 1.2.1 - Improper Input Validation
CVE-2013-4123
Squid 3.2.x-3.2.12 and 3.3.x-3.3.7 - Denial of Service via HTTP Host Header Port Number
CVE-2013-1441
ExactImage < 0.8.9 - Denial of Service via Crafted Image File
CVE-2013-5496
Cisco NX-OS - Authenticated Denial of Service via Crafted Packet
CVE-2013-1029
macOS < 10.8.5 - Denial of Service via IGMP Packet Parsing
CVE-2013-1028
Apple Mac OS X <10.8.5 - Info Disclosure
CVE-2013-5721
Wireshark 1.8.x < 1.8.10 and 1.10.x < 1.10.2 - Denial of Service via MQ Dissector
CVE-2013-5717
Wireshark 1.10.x - Denial of Service via Bluetooth HCI ACL Dissector
Details
Vulnerabilities
12,638
Exploit Likelihood
High