Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2017-07-17 CVE-2017-2347 Improper Input Validation vulnerability in Juniper Junos
A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured.
network
low complexity
juniper CWE-20
7.5
2017-07-17 CVE-2017-2345 Improper Input Validation vulnerability in Juniper Junos
On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet.
network
low complexity
juniper CWE-20
critical
9.8
2017-07-17 CVE-2017-2314 Improper Input Validation vulnerability in Juniper Junos
Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart.
network
low complexity
juniper CWE-20
7.5
2017-07-17 CVE-2017-11346 Improper Input Validation vulnerability in Zohocorp Manageengine Desktop Central
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.
network
low complexity
zohocorp CWE-20
critical
9.8
2017-07-17 CVE-2017-11342 Improper Input Validation vulnerability in Libsass 3.4.5
There is an illegal address access in ast.cpp of LibSass 3.4.5.
network
low complexity
libsass CWE-20
7.5
2017-07-17 CVE-2017-11340 Improper Input Validation vulnerability in Exiv2 0.26
There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call.
network
low complexity
exiv2 CWE-20
6.5
2017-07-17 CVE-2017-10605 Improper Input Validation vulnerability in Juniper Junos 12.1X46/12.3X48/15.1X49
On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the device(s).
network
low complexity
juniper CWE-20
7.5
2017-07-17 CVE-2017-1000048 Improper Input Validation vulnerability in QS Project QS
the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS.
network
low complexity
qs-project CWE-20
7.5
2017-07-17 CVE-2017-1000039 Improper Input Validation vulnerability in Framasoft Framadate 1.0
Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution
network
low complexity
framasoft CWE-20
critical
9.8
2017-07-17 CVE-2017-1000018 Improper Input Validation vulnerability in PHPmyadmin
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
network
low complexity
phpmyadmin CWE-20
7.5