The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,836 vulnerabilities with CWE-20
CVE-2026-51606
HIGH
Tenda CP3 V31.1.9.91 - Denial of Service via Oversized RTSP Field Values
CVSS 7.5
CVE-2026-51599
CRITICAL
MERCURY MIPC252W 1.0.5 Build 230306 - Unauthenticated Denial of Service via RTSP Content-Length Header Parsing
CVSS 9.8
CVE-2026-51598
MEDIUM
MERCURY MIPC252W 1.0.5 Build 230306 - Unauthenticated Denial of Service via Malformed RTSP DESCRIBE Request URL
CVSS 6.5
CVE-2026-15131
MEDIUM
Google Chrome < 150.0.7871.115 - Site Isolation Bypass via Crafted HTML Page in Navigation
CVSS 4.3
CVE-2026-15124
MEDIUM
Google Chrome < 150.0.7871.115 - Same Origin Policy Bypass via Crafted HTML Page in Passwords
CVSS 4.3
CVE-2026-15122
HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-15115
LOW
Google Chrome - Improper Input Validation
CVSS 3.3
CVE-2026-15105
MEDIUM
davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead deserialization
CVSS 6.3
CVE-2026-10037
HIGH
Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal
CVSS 8.8
CVE-2026-59724
HIGH
Socket.IO: Engine.IO WebTransport SID DoS
CVSS 7.5
CVE-2026-41042
CRITICAL
Apache Gravitino < 1.2.1 testConnection - Unauthenticated Remote Code Execution
CVSS 9.1
CVE-2026-54234
HIGH
vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection
CVSS 7.5
CVE-2026-48316
CRITICAL
ColdFusion | Improper Input Validation (CWE-20)
CVSS 10.0
CVE-2026-49042
HIGH
Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
CVSS 7.3
CVE-2026-46588
HIGH
Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVSS 7.3
CVE-2026-46587
HIGH
Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVSS 7.3
CVE-2026-56140
CRITICAL
Apache Camel AWS2 SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components
CVSS 9.8
CVE-2026-55994
HIGH
Apache Camel Iggy - Server-Side Request Forgery via Iggy User Headers
CVSS 7.5
CVE-2026-55993
HIGH
Apache Camel Atmosphere Websocket - Server-Side Request Forgery via Query Parameters
CVSS 7.5
CVE-2026-49098
MEDIUM
Apache Camel Kafka - Kafka Header Control Injection
CVSS 5.3
CVE-2026-49097
MEDIUM
Apache Camel IRC - Message Redirection via irc.* Headers
CVSS 6.5
CVE-2026-49086
MEDIUM
Apache Camel Dapr - Pub/Sub Message Rerouting via CloudEvent Headers
CVSS 6.5
CVE-2026-48206
MEDIUM
Apache Camel Jira 4.14.8, 4.18.3, and 4.21.0 - Authorization Bypass
CVSS 5.3
CVE-2026-48205
CRITICAL
Apache Camel DNS - Server-Side Request Forgery via DNS Headers
CVSS 9.1
CVE-2026-48204
CRITICAL
Apache Camel MongoDB GridFS - GridFS Operation Override
CVSS 9.8
Details
Vulnerabilities
12,836
Exploit Likelihood
High