Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2020-06-19 CVE-2018-21259 Improper Input Validation vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2.
network
low complexity
mattermost CWE-20
5.3
5.3
2020-06-19 CVE-2019-20870 Improper Input Validation vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 5.10.0.
network
low complexity
mattermost CWE-20
4.3
4.3
2020-06-19 CVE-2019-20868 Improper Input Validation vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 5.11.0.
network
low complexity
mattermost CWE-20
7.5
7.5
2020-06-19 CVE-2020-14459 Improper Input Validation vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 5.19.0.
network
low complexity
mattermost CWE-20
7.5
7.5
2020-06-19 CVE-2019-20848 Improper Input Validation vulnerability in Mattermost Mobile
An issue was discovered in Mattermost Mobile Apps before 1.26.0.
network
low complexity
mattermost CWE-20
7.5
7.5
2020-06-18 CVE-2020-3368 Improper Input Validation vulnerability in Cisco Asyncos
A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device.
network
low complexity
cisco CWE-20
5.8
5.8
2020-06-18 CVE-2020-3263 Improper Input Validation vulnerability in Cisco Webex Meetings 33.6.6/39.5.11
A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system.
network
high complexity
cisco CWE-20
7.5
7.5
2020-06-18 CVE-2020-3244 Improper Input Validation vulnerability in Cisco Staros
A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device.
network
low complexity
cisco CWE-20
5.3
5.3
2020-06-16 CVE-2020-7504 Improper Input Validation vulnerability in Schneider-Electric Easergy T300 Firmware 1.5.2
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.
network
low complexity
schneider-electric CWE-20
5.3
5.3
2020-06-16 CVE-2020-8543 Improper Input Validation vulnerability in Open-Xchange Appsuite
OX App Suite through 7.10.3 has Improper Input Validation.
network
low complexity
open-xchange CWE-20
7.5
7.5