Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2022-07-26 CVE-2022-1500 Improper Input Validation vulnerability in Google Chrome
Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google CWE-20
6.5
6.5
2022-07-25 CVE-2022-35649 Improper Input Validation vulnerability in multiple products
The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code.
network
low complexity
moodle fedoraproject CWE-20
critical
 9.8
9.8
2022-07-25 CVE-2022-35650 Improper Input Validation vulnerability in multiple products
The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions.
network
low complexity
moodle fedoraproject CWE-20
7.5
7.5
2022-07-25 CVE-2022-36450 Improper Input Validation vulnerability in Obsidian
Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL.
network
low complexity
obsidian CWE-20
critical
 9.8
9.8
2022-07-22 CVE-2022-20908 Improper Input Validation vulnerability in Cisco Nexus Dashboard
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
local
low complexity
cisco CWE-20
6.7
6.7
2022-07-22 CVE-2022-20909 Improper Input Validation vulnerability in Cisco Nexus Dashboard
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
local
low complexity
cisco CWE-20
6.7
6.7
2022-07-22 CVE-2022-20913 Improper Input Validation vulnerability in Cisco Nexus Dashboard
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device.
network
low complexity
cisco CWE-20
6.5
6.5
2022-07-20 CVE-2022-34866 Improper Input Validation vulnerability in YRL Passage Drive and Passage Drive for BOX
Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication.
local
low complexity
yrl CWE-20
7.8
7.8
2022-07-18 CVE-2022-35404 Improper Input Validation vulnerability in Zohocorp products
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
network
low complexity
zohocorp CWE-20
8.2
8.2
2022-07-17 CVE-2022-26655 Improper Input Validation vulnerability in Pexip Infinity 27.0/27.1/27.2
Pexip Infinity 27.x before 27.3 has Improper Input Validation.
network
low complexity
pexip CWE-20
7.5
7.5