IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. Th
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file wr
Microsoft Outlook for Mac Spoofing Vulnerability
Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that
@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input valida
The firmware update package for the wireless card is not properly signed and can be modified.
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempt
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator
IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation
Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may a
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a S
A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCR
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the
Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize exte
Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial o
A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file
A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could a
IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially c
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary cod
parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can
Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earl
Frequently Asked Questions
What is CWE-20?
CWE-20 (Improper Input Validation) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-20?
There are 14,187 CVE records associated with CWE-20 in our database. Of these, 1071 are critical severity, 4031 are high severity, and 3494 are medium severity.
How can I protect against CWE-20 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-20 using AI-powered security agents.
Detect CWE-20 Vulnerabilities
CyberStrike's AI agents automatically detect improper input validation vulnerabilities across your infrastructure.
Get Started