Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2016-12-11 CVE-2016-6630 Improper Input Validation vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin.
network
low complexity
phpmyadmin CWE-20
6.5
2016-12-11 CVE-2016-6623 Improper Input Validation vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin.
network
low complexity
phpmyadmin CWE-20
6.5
2016-12-09 CVE-2016-6501 Improper Input Validation vulnerability in Jfrog Artifactory
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.
network
low complexity
jfrog CWE-20
critical
9.8
2016-12-09 CVE-2016-6496 Improper Input Validation vulnerability in Atlassian Crowd
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.
network
low complexity
atlassian CWE-20
critical
9.8
2016-12-08 CVE-2016-9919 Improper Input Validation vulnerability in Linux Kernel
The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.
network
low complexity
linux CWE-20
7.5
2016-11-30 CVE-2016-9564 Improper Input Validation vulnerability in BOA 0.92R
Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.
network
low complexity
boa CWE-20
7.5
2016-11-30 CVE-2016-5987 Improper Input Validation vulnerability in IBM Maximo Asset Management
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message.
network
low complexity
ibm CWE-20
5.3
2016-11-30 CVE-2016-2937 Improper Input Validation vulnerability in IBM Bigfix Remote Control 9.1.2
IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."
network
low complexity
ibm CWE-20
6.5
2016-11-30 CVE-2016-2935 Improper Input Validation vulnerability in IBM Bigfix Remote Control 9.1.2
The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request.
network
low complexity
ibm CWE-20
5.3
2016-11-25 CVE-2016-9452 Improper Input Validation vulnerability in Drupal
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
network
low complexity
drupal CWE-20
6.5