Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2020-02-19 CVE-2020-3160 Improper Input Validation vulnerability in Cisco Meeting Server
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications.
network
low complexity
cisco CWE-20
5.3
2020-02-18 CVE-2014-4651 Improper Input Validation vulnerability in Apache Jclouds 1.7.3
It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location.
network
low complexity
apache CWE-20
critical
9.8
2020-02-18 CVE-2015-1425 Improper Input Validation vulnerability in Jakweb Gecko CMS 2.2/2.3
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
network
low complexity
jakweb CWE-20
critical
9.8
2020-02-17 CVE-2013-3738 Improper Input Validation vulnerability in Zabbix 2.0.6
A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code.
network
low complexity
zabbix CWE-20
critical
9.8
2020-02-16 CVE-2020-9013 Improper Input Validation vulnerability in Arvato Skillpipe 3.0
Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.
network
low complexity
arvato CWE-20
4.3
2020-02-14 CVE-2020-8843 Improper Input Validation vulnerability in Istio
An issue was discovered in Istio 1.3 through 1.3.6.
network
high complexity
istio CWE-20
7.4
2020-02-14 CVE-2019-20045 Improper Input Validation vulnerability in S3India Husky RTU 6049-E70 Firmware 5.0
The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior.
network
low complexity
s3india CWE-20
7.5
2020-02-14 CVE-2018-21033 Improper Input Validation vulnerability in Hitachi products
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence.
network
low complexity
hitachi CWE-20
6.5
2020-02-13 CVE-2020-8614 Improper Input Validation vulnerability in Askey Ap4000W Firmware Tdcv1.01.003
An issue was discovered on Askey AP4000W TDC_V1.01.003 devices.
network
low complexity
askey CWE-20
critical
9.8
2020-02-12 CVE-2020-1976 Improper Input Validation vulnerability in Paloaltonetworks Globalprotect
A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash.
local
low complexity
paloaltonetworks CWE-20
5.5