CWE-20

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated at

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP p

Adobe Photoshop versions 21.2.9 (and earlier) and 22.4.2 (and earlier) are affected by an Improper input validation vuln

Adobe Prelude version 10.0 (and earlier) are affected by an uninitialized variable vulnerability when parsing a speciall

Adobe Media Encoder version 15.2 (and earlier) is affected by an uninitialized pointer vulnerability when parsing a spec

Adobe After Effects version 18.2.1 (and earlier) is affected by an Improper input validation vulnerability when parsing

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-00

An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerabili

When a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - ver

When a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in SAP 3D Visual Enterpris

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an admin

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to injec

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient ver

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A M

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Cente

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER an

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POS

BabyGekko before 1.2.4 allows PHP file inclusion.

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network D

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which coul

Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which

In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control c

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-suppl

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may re

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution.

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on he

A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could l

A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, wh

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS

An issue was discovered on Askey AP4000W TDC_V1.01.003 devices. An attacker can perform Remote Code Execution (RCE) by s

A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts,

JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities

It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attack