Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2017-02-22 CVE-2017-5586 Improper Input Validation vulnerability in Opentext Documentum D2
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
network
low complexity
opentext CWE-20
critical
9.8
2017-02-22 CVE-2017-3844 Improper Input Validation vulnerability in Cisco Prime Collaboration Assurance 11.0.0/11.1.0/11.5.0
A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files.
network
low complexity
cisco CWE-20
4.3
2017-02-22 CVE-2017-3843 Improper Input Validation vulnerability in Cisco Prime Collaboration Assurance 11.0.0/11.1.0/11.5.0
A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted.
network
low complexity
cisco CWE-20
4.3
2017-02-22 CVE-2017-3837 Improper Input Validation vulnerability in Cisco Meeting Server
An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information.
network
low complexity
cisco CWE-20
8.1
2017-02-22 CVE-2017-3830 Improper Input Validation vulnerability in Cisco Meeting Server 2.1.0
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance.
network
low complexity
cisco CWE-20
7.5
2017-02-22 CVE-2017-3827 Improper Input Validation vulnerability in Cisco products
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device.
network
low complexity
cisco CWE-20
5.8
2017-02-21 CVE-2017-6078 Improper Input Validation vulnerability in Faststone Maxview 3.0/3.1
FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section.
local
low complexity
faststone CWE-20
5.5
2017-02-20 CVE-2017-2371 Improper Input Validation vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-20
6.5
2017-02-20 CVE-2017-2368 Improper Input Validation vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-20
5.5
2017-02-20 CVE-2017-2351 Improper Input Validation vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
low complexity
apple CWE-20
2.4