Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2020-09-25 CVE-2020-13387 Improper Input Validation vulnerability in Pexip Infinity
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.
network
low complexity
pexip CWE-20
7.5
2020-09-25 CVE-2020-12824 Improper Input Validation vulnerability in Pexip Infinity 23/23.1/23.2
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP.
network
low complexity
pexip CWE-20
7.5
2020-09-25 CVE-2020-11805 Improper Input Validation vulnerability in Pexip Infinity and Reverse Proxy and Turn Server
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
network
low complexity
pexip CWE-20
critical
9.8
2020-09-24 CVE-2020-3526 Improper Input Validation vulnerability in Cisco IOS XE 17.2
A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to crash a device.
network
low complexity
cisco CWE-20
8.6
2020-09-24 CVE-2020-3516 Improper Input Validation vulnerability in Cisco IOS XE
A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device.
network
low complexity
cisco CWE-20
4.3
2020-09-24 CVE-2020-3511 Improper Input Validation vulnerability in Cisco IOS XE 15.1(4)M
A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3497 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3494 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3493 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3492 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco Wireless LAN Controllers (WLC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
8.6