cve.bz

CWE-20: Improper Input Validation, page 5

Filter

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

What the weakness is: CWE-20 at MITRE

Ask an AI about CWE-20

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-20: Improper Input Validation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/20.html and https://cve.bz/cve/cwe/20?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-70294EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  2. 7.8CVE-2026-70177EPSS 0.4%

    Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  3. 7.1CVE-2026-70126EPSS 0.5%

    Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

  4. 9.8CVE-2026-70024EPSS 1.0%

    Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

  5. 7.8CVE-2026-69934EPSS 0.4%

    Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  6. 6.5CVE-2026-105719EPSS 1.1%

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  7. 8.8CVE-2026-105718EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  8. 8.8CVE-2026-105717EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  9. 6.5CVE-2026-102867EPSS 1.0%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  10. 6.9CVE-2026-54700EPSS 0.4%

    ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the contai…

  11. 4.3CVE-2026-9218EPSS 0.2%

    Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized comm…

  12. 6.3CVE-2026-11732EPSS 0.2%

    An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized comman…

  13. 4.3CVE-2026-107918EPSS 0.2%

    Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through…

  14. 4.3CVE-2026-107917EPSS 0.2%

    Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified thro…

  15. 6.1CVE-2026-109770EPSS 0.2%

    Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  16. 5.4CVE-2026-109763EPSS 0.2%

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  17. 4.9CVE-2026-14308EPSS 0.4%

    Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

  18. 2.1CVE-2026-108958EPSS 0.3%

    A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to de…

  19. 1.9CVE-2026-108947EPSS 0.2%

    A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The att…

  20. 8.8CVE-2026-84317EPSS 0.5%

    Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules,…

  21. 8.8CVE-2026-84316EPSS 0.5%

    Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token on each line even though Nginx permits multiple semicolon-…

  22. 7.5CVE-2026-78673EPSS 0.3%

    IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.

  23. 3.3CVE-2026-104364EPSS 0.09%

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.

  24. 8.8CVE-2026-57143EPSS 0.3%

    PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, …

  25. 6.5CVE-2026-94451EPSS 0.3%

    Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn…

  26. 9.8CVE-2026-84286EPSS 0.6%

    ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resu…

  27. 7.1CVE-2026-109311EPSS 0.5%

    vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/…

  28. 6.5CVE-2026-93693EPSS 0.2%

    In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remot…

  29. 5.1CVE-2026-21130EPSS 0.1%

    Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

  30. 5.1CVE-2026-21129EPSS 0.1%

    Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

  31. 5.1CVE-2026-21128EPSS 0.1%

    Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.

  32. 8.6CVE-2026-21125EPSS 0.1%

    Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

  33. 8.6CVE-2026-21124EPSS 0.1%

    Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

  34. 5.5CVE-2026-87765EPSS 0.10%

    In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileg…

  35. 5.5CVE-2026-66085EPSS 0.1%

    In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.

  36. 4.0CVE-2026-107825EPSS 0.3%

    OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERY_…

  37. 6.5CVE-2026-48484EPSS 0.4%

    pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads by reading the whole content of the uploaded file into memory …

  38. 8.8CVE-2026-103413EPSS 0.4%

    Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource k…

  39. 7.1CVE-2026-107734EPSS 0.2%

    SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the r…

  40. 9.3CVE-2026-107726EPSS 0.4%

    Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary …

  41. 7.4CVE-2026-107720EPSS 0.3%

    fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned JWT when key is an empty string or null and algorithms is a non-empty allowlist. Falsy synchronous keys bypass prepareK…

  42. 6.5CVE-2026-107717EPSS 0.3%

    Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() attempts to parse every line of rendered template output as ChatMessage JSON. When an application renders untrusted data …

  43. 5.3CVE-2026-88257EPSS 0.3%

    Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 chec…

  44. 6.5CVE-2026-93509EPSS 0.2%

    The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an auth…

  45. 6.8CVE-2023-5649EPSS 0.09%

    An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when c…

  46. 4.3CVE-2026-76279EPSS 0.2%

    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to write events to internal indexes outside th…

  47. 4.1CVE-2026-76277EPSS 0.2%

    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with a period. The vulnerability is possible because username v…

  48. 4.3CVE-2026-76273EPSS 0.2%

    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to add attacker-controlled content to system-l…

  49. 6.5CVE-2026-107225EPSS 0.3%

    Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File…

  50. 8.2CVE-2026-76468EPSS 0.2%

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addres…