Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2021-04-29 CVE-2021-1084 Improper Input Validation vulnerability in Nvidia Virtual GPU Manager
NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service.
local
low complexity
nvidia CWE-20
7.8
2021-04-29 CVE-2021-1085 Improper Input Validation vulnerability in Nvidia Virtual GPU Manager
NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained.
local
low complexity
nvidia CWE-20
7.3
2021-04-29 CVE-2021-1080 Improper Input Validation vulnerability in Nvidia Virtual GPU Manager
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service.
local
low complexity
nvidia CWE-20
7.8
2021-04-29 CVE-2021-1402 Improper Input Validation vulnerability in Cisco Firepower Threat Defense
A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
8.6
2021-04-28 CVE-2021-31863 Improper Input Validation vulnerability in multiple products
Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to read arbitrary local files accessible by the application server process.
network
low complexity
redmine debian CWE-20
7.5
2021-04-27 CVE-2020-4981 Improper Input Validation vulnerability in IBM Spectrum Scale
IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation.
local
low complexity
ibm CWE-20
6.0
2021-04-26 CVE-2021-21221 Improper Input Validation vulnerability in multiple products
Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
network
low complexity
google debian fedoraproject CWE-20
6.5
2021-04-26 CVE-2021-21208 Improper Input Validation vulnerability in multiple products
Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.
network
low complexity
google debian fedoraproject CWE-20
6.5
2021-04-22 CVE-2021-0267 Improper Input Validation vulnerability in Juniper Junos
An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service.
low complexity
juniper CWE-20
6.5
2021-04-22 CVE-2021-31555 Improper Input Validation vulnerability in Mediawiki
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-20
7.5