Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2023-02-12 CVE-2022-40502 Improper Input Validation vulnerability in Qualcomm products
Transient DOS due to improper input validation in WLAN Host.
network
low complexity
qualcomm CWE-20
7.5
2023-02-12 CVE-2022-45088 Improper Input Validation vulnerability in Gruparge Smartpower web
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion.This issue affects Smartpower Web: before 23.01.01.
network
low complexity
gruparge CWE-20
critical
9.8
2023-02-10 CVE-2023-24569 Improper Input Validation vulnerability in Dell Alienware Command Center 5.4.35.0/5.5.37.0
Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability.
local
low complexity
dell CWE-20
7.8
2023-02-09 CVE-2023-21428 Improper Input Validation vulnerability in Samsung Android 11.0/12.0
Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call.
local
low complexity
samsung CWE-20
3.3
2023-02-09 CVE-2023-21431 Improper Input Validation vulnerability in Samsung Bixby Vision 3.7.50.6
Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision.
local
low complexity
samsung CWE-20
3.3
2023-02-09 CVE-2023-21439 Improper Input Validation vulnerability in Samsung Android 12.0/13.0
Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities.
local
low complexity
samsung CWE-20
7.8
2023-02-09 CVE-2023-21446 Improper Input Validation vulnerability in Samsung Android 11.0/12.0
Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles.
local
low complexity
samsung CWE-20
5.5
2023-02-08 CVE-2022-38778 Improper Input Validation vulnerability in multiple products
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
6.5
2023-02-08 CVE-2022-34350 Improper Input Validation vulnerability in IBM API Connect
IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input.
network
low complexity
ibm CWE-20
7.5
2023-02-06 CVE-2023-20606 Improper Input Validation vulnerability in Google Android 12.0/12.1
In apusys, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-20
4.4