Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2017-04-17 CVE-2017-5659 Improper Input Validation vulnerability in Apache Traffic Server
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding.
network
low complexity
apache CWE-20
7.5
2017-04-17 CVE-2016-4868 Improper Input Validation vulnerability in Cybozu Office
Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.
network
low complexity
cybozu CWE-20
4.3
2017-04-14 CVE-2017-6554 Improper Input Validation vulnerability in Quest Privilege Manager 6.0.027/6.0.050
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
network
low complexity
quest CWE-20
7.2
2017-04-14 CVE-2015-6568 Improper Input Validation vulnerability in Wolfcms Wolf CMS
Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image.
network
low complexity
wolfcms CWE-20
8.8
2017-04-14 CVE-2015-6567 Improper Input Validation vulnerability in Wolfcms Wolf CMS
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly.
network
low complexity
wolfcms CWE-20
8.8
2017-04-14 CVE-2017-7456 Improper Input Validation vulnerability in Moxa Mxview 2.8
Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials.
network
low complexity
moxa CWE-20
7.5
2017-04-14 CVE-2017-7408 Improper Input Validation vulnerability in Paloaltonetworks Traps 3.4.3
Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper validation of requests to revoke a Traps agent license.
network
low complexity
paloaltonetworks CWE-20
7.5
2017-04-14 CVE-2017-7218 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
local
low complexity
paloaltonetworks CWE-20
7.8
2017-04-14 CVE-2017-7217 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os
The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters.
network
low complexity
paloaltonetworks CWE-20
4.3
2017-04-13 CVE-2016-4899 Improper Input Validation vulnerability in Novastor Novabackup Datacenter
The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors.
network
low complexity
novastor CWE-20
critical
9.8