Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2023-11-07 CVE-2023-42527 Improper Input Validation vulnerability in Samsung Android 11.0/12.0
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information.
local
low complexity
samsung CWE-20
5.5
2023-11-01 CVE-2023-20063 Improper Input Validation vulnerability in Cisco Firepower Threat Defense
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to execute arbitrary commands with root permissions on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input.
local
low complexity
cisco CWE-20
8.2
2023-11-01 CVE-2023-20114 Improper Input Validation vulnerability in Cisco Secure Firewall Management Center
A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system.
network
low complexity
cisco CWE-20
6.5
2023-11-01 CVE-2022-48457 Improper Input Validation vulnerability in Google Android 11.0/12.0
In TeleService, there is a possible system crash due to improper input validation.
local
low complexity
google CWE-20
5.5
2023-11-01 CVE-2022-48458 Improper Input Validation vulnerability in Google Android 11.0/12.0
In TeleService, there is a possible system crash due to improper input validation.
local
low complexity
google CWE-20
5.5
2023-11-01 CVE-2022-48459 Improper Input Validation vulnerability in Google Android 11.0/12.0
In TeleService, there is a possible system crash due to improper input validation.
local
low complexity
google CWE-20
5.5
2023-10-31 CVE-2023-37833 Improper Input Validation vulnerability in Elenos Etg150 Firmware 3.12
Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users.
network
low complexity
elenos CWE-20
2.7
2023-10-31 CVE-2023-3676 Improper Input Validation vulnerability in Kubernetes
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes.
network
low complexity
kubernetes CWE-20
8.8
2023-10-31 CVE-2023-3955 Improper Input Validation vulnerability in Kubernetes
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes.
network
low complexity
kubernetes CWE-20
8.8
2023-10-30 CVE-2023-21391 Improper Input Validation vulnerability in Google Android
In Messaging, there is a possible way to disable the messaging application due to improper input validation.
network
low complexity
google CWE-20
7.5