Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2020-05-22 CVE-2020-3272 Improper Input Validation vulnerability in Cisco Prime Network Registrar
A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
7.5
2020-05-21 CVE-2020-1195 Improper Input Validation vulnerability in Microsoft Edge
An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input, aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.
network
high complexity
microsoft CWE-20
5.9
2020-05-21 CVE-2020-1173 Improper Input Validation vulnerability in Microsoft Power BI Report Server
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'.
network
low complexity
microsoft CWE-20
6.8
2020-05-21 CVE-2020-1084 Improper Input Validation vulnerability in Microsoft products
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values.An attacker who successfully exploited this vulnerability could deny dependent security feature functionality.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service validates certain function values., aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'.
local
low complexity
microsoft CWE-20
5.5
2020-05-21 CVE-2020-1081 Improper Input Validation vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-20
7.8
2020-05-21 CVE-2020-10738 Improper Input Validation vulnerability in Moodle
A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions.
network
low complexity
moodle CWE-20
8.8
2020-05-21 CVE-2020-6485 Improper Input Validation vulnerability in multiple products
Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
network
low complexity
google debian opensuse fedoraproject CWE-20
6.5
2020-05-19 CVE-2020-7137 Improper Input Validation vulnerability in HPE Superdome Flex Server Firmware 3.20.186/3.20.206
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege.
local
low complexity
hpe CWE-20
6.7
2020-05-19 CVE-2020-4411 Improper Input Validation vulnerability in IBM Spectrum Scale
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system.
local
low complexity
ibm CWE-20
7.1
2020-05-18 CVE-2020-10967 Improper Input Validation vulnerability in Dovecot
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
network
low complexity
dovecot CWE-20
5.3