Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2023-04-13 CVE-2023-20118 Improper Input Validation vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets.
network
low complexity
cisco CWE-20
7.2
2023-04-11 CVE-2022-42477 Improper Input Validation vulnerability in Fortinet Fortianalyzer
An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.
local
low complexity
fortinet CWE-20
5.5
2023-04-10 CVE-2023-26067 Improper Input Validation vulnerability in Lexmark products
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
network
high complexity
lexmark CWE-20
8.1
2023-04-10 CVE-2023-26068 Improper Input Validation vulnerability in Lexmark products
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
network
low complexity
lexmark CWE-20
critical
9.8
2023-04-10 CVE-2023-26069 Improper Input Validation vulnerability in Lexmark products
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
network
low complexity
lexmark CWE-20
critical
9.8
2023-04-10 CVE-2023-26070 Improper Input Validation vulnerability in Lexmark products
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
network
low complexity
lexmark CWE-20
critical
9.8
2023-04-07 CVE-2023-28707 Improper Input Validation vulnerability in Apache Apache-Airflow-Providers-Apache-Drill
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.
network
low complexity
apache CWE-20
7.5
2023-04-07 CVE-2023-28710 Improper Input Validation vulnerability in Apache Apache-Airflow-Providers-Apache-Spark
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.
network
low complexity
apache CWE-20
7.5
2023-04-05 CVE-2023-20103 Improper Input Validation vulnerability in Cisco Secure Network Analytics 2.1.1/7.4.1
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device.
network
low complexity
cisco CWE-20
7.2
2023-03-28 CVE-2023-24304 Improper Input Validation vulnerability in Irfanview 4.60
Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file.
local
low complexity
irfanview CWE-20
7.8