Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2021-06-09 CVE-2020-11178 Improper Input Validation vulnerability in Qualcomm products
Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
local
low complexity
qualcomm CWE-20
7.8
2021-06-09 CVE-2020-11261 Improper Input Validation vulnerability in Qualcomm products
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
local
low complexity
qualcomm CWE-20
7.8
2021-06-08 CVE-2020-26138 Improper Input Validation vulnerability in Silverstripe
In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation.
network
low complexity
silverstripe CWE-20
5.3
2021-06-08 CVE-2021-22116 Improper Input Validation vulnerability in multiple products
RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint.
network
low complexity
vmware debian CWE-20
7.5
2021-05-28 CVE-2021-29629 Improper Input Validation vulnerability in Freebsd 11.4/12.2/13.0
In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.
network
low complexity
freebsd CWE-20
7.5
2021-05-28 CVE-2021-33620 Improper Input Validation vulnerability in multiple products
Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response.
network
low complexity
squid-cache fedoraproject debian CWE-20
6.5
2021-05-27 CVE-2021-22358 Improper Input Validation vulnerability in Huawei Fusioncompute 8.0.0
There is an insufficient input validation vulnerability in FusionCompute 8.0.0.
network
low complexity
huawei CWE-20
4.3
2021-05-27 CVE-2021-22359 Improper Input Validation vulnerability in Huawei S5700 Firmware and S6700 Firmware
There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700.
network
low complexity
huawei CWE-20
7.5
2021-05-26 CVE-2021-20297 Improper Input Validation vulnerability in multiple products
A flaw was found in NetworkManager in versions before 1.30.0.
local
low complexity
gnome redhat fedoraproject CWE-20
5.5
2021-05-26 CVE-2021-21985 Improper Input Validation vulnerability in VMWare Vcenter Server 6.5/6.7/7.0
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server.
network
low complexity
vmware CWE-20
critical
9.8