Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2022-11-29 CVE-2022-36960 Improper Input Validation vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to Improper Input Validation.
network
low complexity
solarwinds CWE-20
8.8
2022-11-29 CVE-2022-4033 Improper Input Validation vulnerability in Expresstech Quiz and Survey Master
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e.
network
low complexity
expresstech CWE-20
5.3
2022-11-28 CVE-2022-38900 Improper Input Validation vulnerability in Decode-Uri-Component Project Decode-Uri-Component 0.2.0
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
network
low complexity
decode-uri-component-project CWE-20
7.5
2022-11-24 CVE-2022-40266 Improper Input Validation vulnerability in Mitsubishielectric products
Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.
network
low complexity
mitsubishielectric CWE-20
6.5
2022-11-21 CVE-2022-3388 Improper Input Validation vulnerability in Hitachienergy Microscada PRO Sys600 and Microscada X Sys600
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600.
local
low complexity
hitachienergy CWE-20
7.8
2022-11-17 CVE-2022-20459 Improper Input Validation vulnerability in Google Android
In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation.
local
low complexity
google CWE-20
6.7
2022-11-15 CVE-2022-20924 Improper Input Validation vulnerability in Cisco products
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation.
network
low complexity
cisco CWE-20
6.5
2022-11-15 CVE-2022-38385 Improper Input Validation vulnerability in IBM Cloud PAK for Security 1.10.0.0/1.10.2.0
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation.
network
low complexity
ibm CWE-20
8.1
2022-11-12 CVE-2022-40773 Improper Input Validation vulnerability in Zohocorp products
Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation.
network
low complexity
zohocorp CWE-20
8.8
2022-11-11 CVE-2022-31772 Improper Input Validation vulnerability in IBM MQ
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels.
network
low complexity
ibm CWE-20
6.5