The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,669 vulnerabilities with CWE-20
CVE-2002-1175
fetchmail < 6.0.0 - Denial of Service via Malformed DNS Packet
CVE-2002-0146
fetchmail < 5.9.10 - Memory Corruption via Excessive IMAP Message Count
CVE-2001-1584
CardBoard 2.4 - Remote Command Execution via Recipient Field
CVE-2001-0748
acme_server 1.7 - Unauthenticated Arbitrary File Read via URI Path Traversal
CVE-2001-0509
Microsoft Exchange Server 2000 and earlier - Denial of Service via Malformed RPC Input
CVE-2001-0566
Cisco Catalyst 2900XL - Denial of Service via Empty UDP Packet to SNMP Port
CVE-2001-0427
Cisco VPN 3000 Series Concentrators - Denial of Service via Invalid Login Request Flood
CVE-2000-0400
Internet Explorer 5 - Unauthenticated Arbitrary File Download via Active Movie ActiveX Control
CVE-2000-0380
Cisco IOS 11.1-12.1 - Denial of Service via URL with %% String
CVE-2000-0258
HIGH
Internet Information Server 4.0 and 5.0 - Denial of Service via Escaped Character Flood
CVSS 7.5
CVE-1999-0001
BSD-derived TCP/IP Implementations - Denial of Service via Crafted Packets
CVE-1999-0995
Windows NT - Denial of Service via Malformed LsaLookupSids Arguments
CVE-1999-1547
Oracle Web Listener 2.1 - Unauthenticated Access Restriction Bypass via Hex-Encoded URL Characters
CVE-1999-0999
Microsoft SQL Server 7.0 - Denial of Service via Malformed TDS Packet
CVE-1999-0867
Internet Information Server 4.0 - Denial of Service via Malformed HTTP Headers
CVE-1999-0721
Windows NT and Windows 2000 - Denial of Service via Malformed LSA Request
CVE-1999-0918
Microsoft Windows - Denial of Service via Malformed IGMP Packets
CVE-1999-0726
Windows NT - Denial of Service via Malformed File Image Header
CVE-1999-0265
Microware OS-9 - Denial of Service via ICMP Redirect Message
Details
Vulnerabilities
12,669
Exploit Likelihood
High