The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,643 vulnerabilities with CWE-20
CVE-2008-3007
Microsoft Office and OneNote - Remote Code Execution via Crafted onenote:// URL
CVE-2008-2326
Apple Bonjour for Windows - Denial of Service via Crafted .local Domain Name
CVE-2008-1144
Marvell 88W8361W-BEM1 - Denial of Service via Malformed EAPoL-Key Packet
CVE-2008-1197
Marvell driver for Netgear WN802T - DoS
CVE-2008-3530
FreeBSD 6.3-7.1, NetBSD 3.0-4.0 - DoS
CVE-2008-3947
OpenVMS Alpha 8.3 - Privilege Escalation
CVE-2008-3936
Dreambox DM500C - Denial of Service via Long URI
CVE-2008-3932
Wireshark 0.9.7-1.0.2 - Denial of Service via Crafted NCP Packet
CVE-2008-3933
Wireshark 0.10.14-1.0.2 - Denial of Service via Malformed Zlib-Compressed Packet
CVE-2008-3934
Wireshark 0.99.6-1.0.2 - Denial of Service via Crafted Tektronix .rf5 File
CVE-2008-3904
GPicView 0.1.9 - OS Command Injection via Filename Shell Metacharacters
CVE-2008-3906
Mono <2.0 - HTTP Response Splitting
CVE-2008-3907
newsbeuter <1.1 - Command Injection
CVE-2008-2735
Cisco Adaptive Security Appliance 5500 8.0-8.0(3)15 and 8.1-8.1(1)5 - Denial of Service via URI Processing
CVE-2008-3697
VMware Server < 1.0.7 - Denial of Service via Malformed ISAPI Request
CVE-2008-3879
Ultra Office Control 2.0.2008.801 - RCE
CVE-2008-3790
Ruby 1.8.6-1.8.6-p287, 1.8.7-1.8.7-p72, 1.9 - Denial of Service via XML Entity Expansion
CVE-2008-3838
Sun Solaris <snv_88 - Privilege Escalation
CVE-2008-3844
OpenSSH - Trojan Horse via Malicious Red Hat Package
CVE-2008-3796
Swfdec 0.6 - Denial of Service via 1x1 JPEG Image
CVE-2008-3766
Realtime Internet Band Rehearsal Low-Latency Connection Tool < 2.1.2 - Denial of Service via Malformed Protocol Messages
CVE-2008-3761
VMware Workstation 6.5.1 - Denial of Service via IOCTL Request
CVE-2008-3763
Turnkey PHP Live Helper <2.0.1 - Code Injection
CVE-2008-3660
PHP 4.4.x < 4.4.9 and 5.x <= 5.2.6 - Denial of Service via FastCGI Extension Handling
CVE-2008-2941
HP Linux Imaging and Printing Project - Denial of Service via hpssd Message Parser
Details
Vulnerabilities
12,643
Exploit Likelihood
High