Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2022-11-25 CVE-2022-39338 Improper Input Validation vulnerability in Nextcloud Openid Connect User Backend
user_oidc is an OpenID Connect user backend for Nextcloud.
network
low complexity
nextcloud CWE-20
5.4
2022-11-24 CVE-2022-40266 Improper Input Validation vulnerability in Mitsubishielectric products
Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.
network
low complexity
mitsubishielectric CWE-20
6.5
2022-11-21 CVE-2022-3388 Improper Input Validation vulnerability in Hitachienergy Microscada PRO Sys600 and Microscada X Sys600
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600.
local
low complexity
hitachienergy CWE-20
7.8
2022-11-21 CVE-2022-45470 Improper Input Validation vulnerability in Apache Hama
missing input validation in Apache Hama may cause information disclosure through path traversal and XSS.
network
low complexity
apache CWE-20
7.5
2022-11-18 CVE-2022-41888 Improper Input Validation vulnerability in Google Tensorflow
TensorFlow is an open source platform for machine learning.
network
low complexity
google CWE-20
7.5
2022-11-18 CVE-2022-41908 Improper Input Validation vulnerability in Google Tensorflow
TensorFlow is an open source platform for machine learning.
network
low complexity
google CWE-20
7.5
2022-11-18 CVE-2022-24037 Improper Input Validation vulnerability in Karmasis Infraskope Siem+
Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.
network
low complexity
karmasis CWE-20
8.2
2022-11-17 CVE-2022-20459 Improper Input Validation vulnerability in Google Android
In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation.
local
low complexity
google CWE-20
6.7
2022-11-17 CVE-2022-39389 Improper Input Validation vulnerability in multiple products
Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node.
6.5
2022-11-15 CVE-2022-20924 Improper Input Validation vulnerability in Cisco products
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation.
network
low complexity
cisco CWE-20
6.5