CWE-20 <span class="text-2xl md:text-3xl font-bold ml-2" style="color:var(--text-secondary)">— Improper Input Validation

CVE-2021-33113HIGHCVSS 8.1EG 8.1

Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacen…

CVE-2021-33114MEDIUMCVSS 5.7EG 5.7

Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via…

CVE-2021-33115HIGHCVSS 8.8EG 8.8

Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access.

CVE-2021-33141HIGHCVSS 8.6EG 8.6

Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVE-2021-33142MEDIUMCVSS 6.0EG 6.0

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable denial of service via network access.

CVE-2021-33146MEDIUMCVSS 5.3EG 5.3

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local access.

CVE-2021-33155MEDIUMCVSS 5.7EG 5.7

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable information disclosure via network access.

CVE-2021-33161HIGHCVSS 7.2EG 7.2

Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.

CVE-2021-33196HIGHCVSS 7.5EG 7.5

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.

2021-08-02

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

CVE-2021-33199CRITICALCVSS 9.8EG 9.8

2021-08-12

In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input->get('file') instead of the fixed file names of icon.png and icon.svg.

CVE-2021-33285HIGHCVSS 7.8EG 7.8

2021-09-07

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is cause…

CVE-2021-33287HIGHCVSS 7.8EG 7.8

2021-09-07

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application.

CVE-2021-33315CRITICALCVSS 9.8EG 9.8

2022-05-11

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by…

CVE-2021-33316CRITICALCVSS 9.8EG 9.8

2022-05-11

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV,…

CVE-2021-33488MEDIUMCVSS 6.1EG 6.1

2021-11-22

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook.

CVE-2021-33498HIGHCVSS 7.5EG 7.5

2022-01-15

Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).

CVE-2021-33499HIGHCVSS 7.5EG 7.5

2022-01-15

Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).

CVE-2021-33527CRITICALCVSS 9.8EG 7.8

2021-08-02

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code e…

CVE-2021-33592CRITICALCVSS 9.8EG 9.8

2021-07-19

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.

CVE-2021-33609MEDIUMCVSS 4.3EG 4.3

2021-10-13

Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authenticated network attacker to cause heap exhaustion by requesting too many rows of data.

CVE-2021-33620MEDIUMCVSS 6.5EG 6.5

2021-05-28

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any…

CVE-2021-33659MEDIUMCVSS 5.5EG 5.5

2021-06-09

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the applicat…

CVE-2021-33660MEDIUMCVSS 5.5EG 5.5

2021-06-09

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the applicat…

CVE-2021-33661MEDIUMCVSS 5.5EG 5.5

2021-06-09

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the applicat…

CVE-2021-33706MEDIUMCVSS 4.3EG 4.3

2021-08-10

Due to improper input validation in InfraBox, logs can be modified by an authenticated user.

CVE-2021-33708HIGHCVSS 8.8EG 8.8

2021-08-10

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.

CVE-2021-33886HIGHCVSS 8.1EG 8.8

2021-08-25

An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external string straight through to printf statement…

CVE-2021-3422HIGHCVSS 7.5EG 7.5

2022-03-25

The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise version…

CVE-2021-34291HIGHCVSS 7.8EG 7.8

CVE-2021-34292HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files.…

CVE-2021-34293HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

CVE-2021-34294HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files.…

CVE-2021-34295HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files.…

CVE-2021-34296HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files.…

CVE-2021-34297HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files.…

CVE-2021-34298HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files.…

CVE-2021-34299MEDIUMCVSS 5.5EG 5.5

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing fur…

CVE-2021-34300HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

CVE-2021-34301HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

CVE-2021-34302MEDIUMCVSS 5.5EG 5.5

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing fur…

CVE-2021-34303MEDIUMCVSS 5.5EG 5.5

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files.…

CVE-2021-34304MEDIUMCVSS 5.5EG 5.5

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

CVE-2021-34305HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

CVE-2021-34306HIGHCVSS 7.8EG 7.8

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files.…