CWE-20 · 13.470 kayıt

Improper Input Validation

Bu sınıftaki CVE’ler

10.000 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
100Hemen	CVE-2024-3400Silahlaştırılmış	PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectpaloaltonetworks · pan-os · CWE-20 Girişsiz RCE Komut enjeksiyonu	Kritik10,0	KEV	%99,9	12 Nis 2024
100Hemen	CVE-2021-44228Silahlaştırılmış	Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsapache · log4j · CWE-20 Girişsiz RCE	Kritik10,0	KEV	%99,9	10 Ara 2021
99Hemen	CVE-2018-7600Silahlaştırılmış	Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because odrupal · drupal · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%99,9	29 Mar 2018
99Hemen	CVE-2019-0604Silahlaştırılmış	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pamicrosoft · sharepoint enterprise server · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%99,9	5 Mar 2019
99Hemen	CVE-2022-47966Silahlaştırılmış	Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Sanzohocorp · manageengine access manager plus · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%99,7	18 Oca 2023
99Hemen	CVE-2018-0171Silahlaştırılmış	A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attackercisco · ios · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%99,4	28 Mar 2018
99Hemen	CVE-2023-22515Silahlaştırılmış	Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknowatlassian · confluence data center · CWE-20 Kimlik doğrulamasız	Kritik9,8	KEV	%99,2	4 Eki 2023
99Hemen	CVE-2022-24086Silahlaştırılmış	Adobe Commerce checkout improper input validation leads to remote code executionadobe · commerce · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%99,1	16 Şub 2022
99Hemen	CVE-2017-3881Silahlaştırılmış	A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthecisco · ios · CWE-20 Kimlik doğrulamasız	Kritik9,8	KEV	%98,9	17 Mar 2017
99Hemen	CVE-2017-9791Silahlaştırılmış	The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message tapache · struts · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%98,9	10 Tem 2017
99Hemen	CVE-2017-15944Silahlaştırılmış	Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to executepaloaltonetworks · pan-os · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%98,3	11 Ara 2017
99Hemen	CVE-2020-1350Silahlaştırılmış	A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows microsoft · windows server 2008 · CWE-20 Girişsiz RCE	Kritik10,0	KEV	%96,7	14 Tem 2020
98Hemen	CVE-2023-23397Silahlaştırılmış	Microsoft Outlook Elevation of Privilege Vulnerabilitymicrosoft · 365 apps · CWE-20 Kimlik doğrulamasız	Kritik9,8	KEV	%97,1	14 Mar 2023
97Hemen	CVE-2024-21413Silahlaştırılmış	Microsoft Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%94,6	13 Şub 2024
97Hemen	CVE-2026-34910Silahlaştırılmış	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute aui · unifi os server · CWE-20 Girişsiz RCE Komut enjeksiyonu	Kritik10,0	KEV	%90,0	21 May 2026
95Hemen	CVE-2025-54236Silahlaştırılmış	Adobe Commerce \| Improper Input Validation (CWE-20)adobe · commerce · CWE-20 Kimlik doğrulamasız	Kritik9,1	KEV	%95,5	9 Eyl 2025
95Hemen	CVE-2023-2868Silahlaştırılmış	Remote Code injection in Barracuda Email Security Gatewaybarracuda · email security gateway 300 firmware · CWE-20 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	KEV	%86,8	24 May 2023
94Hemen	CVE-2026-34197Silahlaştırılmış	Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansapache · activemq · CWE-20 RCE	Yüksek8,8	KEV	%98,2	7 Nis 2026
94Hemen	CVE-2009-0927Silahlaştırılmış	Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to eadobe · acrobat reader · CWE-20 Girişsiz RCE	Yüksek8,8	KEV	%96,6	19 Mar 2009
94Hemen	CVE-2020-3161Silahlaştırılmış	Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerabilitycisco · ip phone 8865 firmware · CWE-20 Girişsiz RCE	Kritik9,8	KEV	%83,8	15 Nis 2020
93Hemen	CVE-2026-88771Silahlaştırılmış	A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandscitrix · netscaler application delivery controller · CWE-20 Girişsiz RCE	Kritik9,5	KEV	%81,8	27 Eyl 2026
92Hemen	CVE-2017-0148Silahlaştırılmış	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block · CWE-20 Girişsiz RCE	Yüksek8,1	KEV	%99,3	16 Mar 2017
92Hemen	CVE-2016-3714Silahlaştırılmış	The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x beforimagemagick · imagemagick · CWE-20 RCE	Yüksek8,4	KEV	%97,4	5 May 2016
90Hemen	CVE-2020-3452Silahlaştırılmış	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerabilitycisco · adaptive security appliance software · CWE-20 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	KEV	%99,9	22 Tem 2020
90Hemen	CVE-2018-0296Silahlaştırılmış	A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to causecisco · adaptive security appliance software · CWE-20 Kimlik doğrulamasız Kimlik doğrulama atlatma Yol geçişi	Yüksek7,5	KEV	%99,8	7 Haz 2018

CVE-2024-3400
100Hemen
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
- Komut enjeksiyonu
paloaltonetworks · pan-os12 Nis 2024
CVE-2021-44228
100Hemen
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
apache · log4j10 Ara 2021
CVE-2018-7600
99Hemen
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because o
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
drupal · drupal29 Mar 2018
CVE-2019-0604
99Hemen
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
microsoft · sharepoint enterprise server5 Mar 2019
CVE-2022-47966
99Hemen
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
zohocorp · manageengine access manager plus18 Oca 2023
CVE-2018-0171
99Hemen
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
cisco · ios28 Mar 2018
CVE-2023-22515
99Hemen
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknow
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Kimlik doğrulamasız
atlassian · confluence data center4 Eki 2023
CVE-2022-24086
99Hemen
Adobe Commerce checkout improper input validation leads to remote code execution
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
adobe · commerce16 Şub 2022
CVE-2017-3881
99Hemen
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98
- Kimlik doğrulamasız
cisco · ios17 Mar 2017
CVE-2017-9791
99Hemen
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message t
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98
- Girişsiz RCE
apache · struts10 Tem 2017
CVE-2017-15944
99Hemen
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98
- Girişsiz RCE
paloaltonetworks · pan-os11 Ara 2017
CVE-2020-1350
99Hemen
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %96
- Girişsiz RCE
microsoft · windows server 200814 Tem 2020
CVE-2023-23397
98Hemen
Microsoft Outlook Elevation of Privilege Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97
- Kimlik doğrulamasız
microsoft · 365 apps14 Mar 2023
CVE-2024-21413
97Hemen
Microsoft Outlook Remote Code Execution Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94
- Girişsiz RCE
microsoft · 365 apps13 Şub 2024
CVE-2026-34910
97Hemen
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %90
- Girişsiz RCE
- Komut enjeksiyonu
ui · unifi os server21 May 2026
CVE-2025-54236
95Hemen
Adobe Commerce | Improper Input Validation (CWE-20)
KritikCVSS 9,1KEVSilahlaştırılmışEPSS %95
- Kimlik doğrulamasız
adobe · commerce9 Eyl 2025
CVE-2023-2868
95Hemen
Remote Code injection in Barracuda Email Security Gateway
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86
- Girişsiz RCE
- Komut enjeksiyonu
barracuda · email security gateway 300 firmware24 May 2023
CVE-2026-34197
94Hemen
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %98
- RCE
apache · activemq7 Nis 2026
CVE-2009-0927
94Hemen
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to e
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %96
- Girişsiz RCE
adobe · acrobat reader19 Mar 2009
CVE-2020-3161
94Hemen
Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83
- Girişsiz RCE
cisco · ip phone 8865 firmware15 Nis 2020
CVE-2026-88771
93Hemen
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
KritikCVSS 9,5KEVSilahlaştırılmışEPSS %81
- Girişsiz RCE
citrix · netscaler application delivery controller27 Eyl 2026
CVE-2017-0148
92Hemen
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
microsoft · server message block16 Mar 2017
CVE-2016-3714
92Hemen
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x befor
YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %97
- RCE
imagemagick · imagemagick5 May 2016
CVE-2020-3452
90Hemen
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99
- Kimlik doğrulamasız
- Yol geçişi
cisco · adaptive security appliance software22 Tem 2020
CVE-2018-0296
90Hemen
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Yol geçişi
cisco · adaptive security appliance software7 Haz 2018

Tüm zafiyet sınıfları