CWE-20

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (X

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a rem

With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io

Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspecto

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runnin

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in al

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne

The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when recei

Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, do

A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the functio

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M5

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affect

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the f

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classi

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German C

The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6.

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not ac

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privilege

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSD

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, an

Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can c

The Booking Plugin for WordPress Appointments – Time Slot plugin for WordPress is vulnerable to unauthorized email sendi

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote u

mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple (unprefixed) classna

The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2

regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned m

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has th

In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant fo

TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly s

Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.

A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processin

Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authentica

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the funct

A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readO

Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from

There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to se

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that c

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text B