The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,448 vulnerabilities with CWE-20
CVE-2025-47968
HIGH
Microsoft AutoUpdate < 4.79 - Authenticated Privilege Escalation
CVSS 7.8
CVE-2025-47171
MEDIUM
Microsoft Office Outlook - Authenticated Local Code Execution via Improper Input Validation
CVSS 6.7
CVE-2025-4680
HIGH
upKeeper Instant Privilege Access <1.4.0 - Info Disclosure
CVE-2025-3898
MEDIUM
Schneider Electric Modicon M241/M251 <5.3.12.51 & M262 <5.3.9.18 Authenticated DoS via Invalid HTTPS Data
CVSS 6.5
CVE-2025-3116
MEDIUM
Schneider Electric Modicon M241/M251 <5.3.12.51 & M258/LMC058 Authenticated DoS via HTTPS
CVSS 6.5
CVE-2025-1041
CRITICAL
Avaya Call Management System <20.0.1.0 - Command Injection
CVSS 9.9
CVE-2025-0037
MEDIUM
AMD Versal Adaptive SoC - Memory Corruption
CVSS 6.6
CVE-2025-27242
LOW
OpenHarmony < 5.0.3 - Denial of Service via Improper Input Validation
CVSS 3.3
CVE-2025-27131
MEDIUM
OpenHarmony < 5.0.3 - Denial of Service via Improper Input Validation
CVSS 6.1
CVE-2025-5680
MEDIUM
AgileBPM < 2.5.0 - Deserialization via Groovy Script Handler
CVSS 6.3
CVE-2025-5679
MEDIUM
AgileBPM < 2.5.0 - Remote Code Execution via FreeMarker Template Deserialization
CVSS 6.3
CVE-2025-1701
HIGH
MIM Admin Service RMI - Local Code Execution
CVE-2025-5552
MEDIUM
ChestnutCMS <15.1 - Deserialization
CVSS 6.3
CVE-2025-5499
HIGH
Slackero phpwcms <1.9.45/1.10.8 - Deserialization
CVSS 7.3
CVE-2025-5498
MEDIUM
Slackero phpwcms <1.9.45/1.10.8 - Deserialization
CVSS 5.5
CVE-2025-5497
MEDIUM
Slackero phpwcms <1.9.45/1.10.8 - Deserialization
CVSS 6.3
CVE-2025-5455
HIGH
Qt <5.15.18, 6.0.0-6.5.8, 6.6.0-6.8.3, 6.9.0 - DoS
CVE-2025-48944
MEDIUM
vLLM 0.8.0-0.9.0 - Denial of Service via Malformed Tools Input
CVSS 6.5
CVE-2025-4635
MEDIUM
JCT Airpointer 2 Diagnostics - Admin Command Execution
CVSS 6.6
CVE-2025-48490
MEDIUM
Laravel Rest Api <2.13.0 - Validation Bypass
CVE-2025-5326
MEDIUM
zhilink ADP Application Developer Platform 1.0.0 - Deserialization of Untrusted Data via /adpweb/wechat/verifyToken/
CVSS 6.3
CVE-2025-33043
MEDIUM
AMI APTIO V 5.0-5.010 - Improper Input Validation
CVSS 5.8
CVE-2025-27151
MEDIUM
Redis 7.0.0-7.2.9 - Stack-based Buffer Overflow in redis-check-aof via File Path Copy
CVSS 4.7
CVE-2025-5174
MEDIUM
erdogant pypickle < 2.0.0 - Deserialization of Untrusted Data via load Function
CVSS 5.3
CVE-2025-5173
MEDIUM
HumanSignal label-studio-ml-backend - Deserialization of Untrusted Data in PT File Handler
CVSS 5.3
Details
Vulnerabilities
12,448
Exploit Likelihood
High