Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2023-12-18 CVE-2023-32727 Improper Input Validation vulnerability in Zabbix Server 6.0.22/6.4.7/7.0.0
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
network
low complexity
zabbix CWE-20
7.2
2023-12-15 CVE-2023-6835 Improper Input Validation vulnerability in Wso2 API Manager and IOT Server
Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.
network
low complexity
wso2 CWE-20
5.3
2023-12-07 CVE-2023-49958 Improper Input Validation vulnerability in Dallmann-Consulting Open Charge Point Protocol 0.1/1.1.0/1.2.0
An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles.
network
low complexity
dallmann-consulting CWE-20
7.5
2023-12-05 CVE-2023-33042 Improper Input Validation vulnerability in Qualcomm products
Transient DOS in Modem after RRC Setup message is received.
network
low complexity
qualcomm CWE-20
7.5
2023-12-04 CVE-2023-40097 Improper Input Validation vulnerability in Google Android
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation.
local
low complexity
google CWE-20
7.8
2023-11-30 CVE-2023-5274 Improper Input Validation vulnerability in Mitsubishielectric GX Works2
Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets.
local
high complexity
mitsubishielectric CWE-20
4.7
2023-11-30 CVE-2023-5275 Improper Input Validation vulnerability in Mitsubishielectric GX Works2
Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets.
local
high complexity
mitsubishielectric CWE-20
4.7
2023-11-16 CVE-2023-32469 Improper Input Validation vulnerability in Dell products
Dell Precision Tower BIOS contains an Improper Input Validation vulnerability.
local
low complexity
dell CWE-20
6.7
2023-11-14 CVE-2022-23820 Improper Input Validation vulnerability in AMD products
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
network
low complexity
amd CWE-20
critical
9.8
2023-11-14 CVE-2022-45469 Improper Input Validation vulnerability in Intel Unison Software 20.14.2.3053/20.14.4244
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-20
7.8