CWE-20 · Input Validation and Logic
Improper Input Validation
12,139CVEs
63exploited
50with a public check
766likely (EPSS 10%+)
SortMost likely exploited
12,139 CVEs with CWE-20 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-3452In CISA KEVExploitedCisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File InclusionCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 7.5 · 2020-07-22 | 7.5 | 100% | 2020-07-22 |
| CVE-2018-7600In CISA KEVExploitedDrupal - Remote Code ExecutionDrupal · Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 · CVSS 9.8 · 2018-03-29 | 9.8 | 100% | 2018-03-29 |
| CVE-2019-0604In CISA KEVExploitedA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote…Microsoft · Microsoft SharePoint Server · CVSS 9.8 · 2019-03-06 | 9.8 | 100% | 2019-03-06 |
| CVE-2018-0296In CISA KEVExploitedCisco ASA - Local File InclusionCisco · Cisco Adaptive Security Appliance unknown · CVSS 7.5 · 2018-06-07 | 7.5 | 100% | 2018-06-07 |
| CVE-2022-47966In CISA KEVExploitedManageEngine - Remote Command ExecutionZoho · ManageEngine · CVSS 9.8 · 2023-01-18 | 9.8 | 100% | 2023-01-18 |
| CVE-2018-0171In CISA KEVExploitedCisco Smart Install - Configuration DownloadCisco · Cisco IOS and IOS XE · CVSS 7.5 · 2018-03-28 | 7.5 | 99% | 2018-03-28 |
| CVE-2017-0148In CISA KEVExploitedThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…Microsoft Corporation · Windows SMB · CVSS 8.1 · 2017-03-17 | 8.1 | 99% | 2017-03-17 |
| CVE-2023-22515In CISA KEVExploitedAtlassian Confluence - Privilege EscalationAtlassian · Confluence Data Center · CVSS 10 · 2023-10-04 | 10.0 | 99% | 2023-10-04 |
| CVE-2022-24086In CISA KEVExploitedAdobe Commerce (Magento) - Remote Code ExecutionAdobe · Magento Commerce · CVSS 9.8 · 2022-02-16 | 9.8 | 99% | 2022-02-16 |
| CVE-2017-3881In CISA KEVExploitedCisco IOS 12.2(55)SE11 - Remote Code ExecutionCisco · Cisco IOS and IOS XE Software · CVSS 9.8 · 2017-03-17 | 9.8 | 99% | 2017-03-17 |
| CVE-2017-9791In CISA KEVExploitedApache Struts2 S2-053 - Remote Code ExecutionApache Software Foundation · Apache Struts · CVSS 9.8 · 2017-07-10 | 9.8 | 99% | 2017-07-10 |
| CVE-2016-3714In CISA KEVExploitedThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to exe…ImageMagick · ImageMagick · CVSS 8.4 · 2016-05-05 | 8.4 | 97% | 2016-05-05 |
| CVE-2023-23397In CISA KEVExploitedMicrosoft Outlook Elevation of Privilege VulnerabilityMicrosoft · Microsoft Office LTSC 2021 · CVSS 9.8 · 2023-03-14 | 9.8 | 97% | 2023-03-14 |
| CVE-2020-1350In CISA KEVExploitedA remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulner…Microsoft · Windows Server · CVSS 10 · 2020-07-14 | 10.0 | 97% | 2020-07-14 |
| CVE-2019-1652In CISA KEVExploitedCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityCisco · Cisco Small Business RV Series Router Firmware · CVSS 7.2 · 2019-01-24 | 7.2 | 96% | 2019-01-24 |
| CVE-2025-54236In CISA KEVExploitedAdobe Commerce - Authentication BypassAdobe · Adobe Commerce · CVSS 9.1 · 2025-09-09 | 9.1 | 96% | 2025-09-09 |
| CVE-2024-21413In CISA KEVExploitedMicrosoft Outlook Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 9.8 · 2024-02-13 | 9.8 | 95% | 2024-02-13 |
| CVE-2026-34910In CISA KEVExploitedUniFi OS Server - Command InjectionUbiquiti Inc · UniFi OS Server · CVSS 10 · 2026-05-22 | 10.0 | 90% | 2026-05-22 |
| CVE-2012-0151In CISA KEVExploitedThe Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows…Microsoft · Windows · CVSS 7.8 · 2012-04-10 | 7.8 | 88% | 2012-04-10 |
| CVE-2023-2868In CISA KEVExploitedRemote Code injection in Barracuda Email Security GatewayBarracuda · Barracuda Email Security Gateway · CVSS 9.4 · 2023-05-24 | 9.4 | 87% | 2023-05-24 |
| CVE-2020-3161In CISA KEVExploitedCisco IP Phones Web Server Remote Code Execution and Denial of Service VulnerabilityCisco · Cisco IP phone · CVSS 9.8 · 2020-04-15 | 9.8 | 84% | 2020-04-15 |
| CVE-2026-88771In CISA KEVExploitedA remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsCitrix NetScaler · ADC · CVSS 9.5 · 2026-09-27 | 9.5 | 82% | 2026-09-27 |
| CVE-2018-8414In CISA KEVExploitedA remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Wi…Microsoft · Windows 10 Servers · CVSS 8.8 · 2018-08-15 | 8.8 | 73% | 2018-08-15 |
| CVE-2019-1068In CISA KEVExploitedA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution…Microsoft · Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) · CVSS 8.8 · 2019-07-15 | 8.8 | 57% | 2019-07-15 |
| CVE-2019-11708In CISA KEVExploitedInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content ch…Mozilla · Firefox ESR · CVSS 10 · 2019-07-23 | 10.0 | 56% | 2019-07-23 |
| CVE-2022-29499In CISA KEVExploitedThe Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA…Mitel · MiVoice Connect · CVSS 9.8 · 2022-04-26 | 9.8 | 55% | 2022-04-26 |
| CVE-2018-0125In CISA KEVExploitedA vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute…Cisco · Cisco RV132W and RV134W · CVSS 9.8 · 2018-02-08 | 9.8 | 55% | 2018-02-08 |
| CVE-2026-32201In CISA KEVExploitedMicrosoft SharePoint Server Spoofing VulnerabilityMicrosoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 6.5 · 2026-04-14 | 6.5 | 44% | 2026-04-14 |
| CVE-2013-6282In CISA KEVExploitedThe (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read…Linux · Kernel · CVSS 8.8 · 2013-11-19 | 8.8 | 40% | 2013-11-19 |
| CVE-2026-6973In CISA KEVExploitedAn Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code…Ivanti · Endpoint Manager Mobile · CVSS 7.2 · 2026-05-07 | 7.2 | 34% | 2026-05-07 |
| CVE-2020-8195In CISA KEVExploitedImproper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11…Citrix · Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP · CVSS 6.5 · 2020-07-10 | 6.5 | 33% | 2020-07-10 |
| CVE-2025-20393In CISA KEVExploitedCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityCisco · Cisco Secure Email · CVSS 10 · 2025-12-17 | 10.0 | 32% | 2025-12-17 |
| CVE-2023-36563In CISA KEVExploitedMicrosoft WordPad Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-10-10 | 6.5 | 20% | 2023-10-10 |
| CVE-2023-36761In CISA KEVExploitedMicrosoft Word Information Disclosure VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 6.5 · 2023-09-12 | 6.5 | 20% | 2023-09-12 |
| CVE-2018-0147In CISA KEVExploitedA vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute ar…Cisco · Cisco Secure Access Control System · CVSS 9.8 · 2018-03-08 | 9.8 | 18% | 2018-03-08 |
| CVE-2015-2291In CISA KEVExploited(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly ex…Intel · Ethernet Diagnostics Driver for Windows · CVSS 7.8 · 2017-08-09 | 7.8 | 16% | 2017-08-09 |
| CVE-2019-7193In CISA KEVExploitedThis improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest…QNAP · QNAP NAS devices · CVSS 9.8 · 2019-12-05 | 9.8 | 14% | 2019-12-05 |
| CVE-2017-12240In CISA KEVExploitedThe DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar…Cisco · Cisco IOS and IOS XE · CVSS 9.8 · 2017-09-28 | 9.8 | 14% | 2017-09-28 |
| CVE-2025-6558In CISA KEVExploitedInsufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafte…Google · Chrome · CVSS 8.8 · 2025-07-15 | 8.8 | 11% | 2025-07-15 |
| CVE-2024-38189In CISA KEVExploitedMicrosoft Project Remote Code Execution VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 8.8 · 2024-08-13 | 8.8 | 8.2% | 2024-08-13 |
| CVE-2018-0172In CISA KEVExploitedA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affec…Cisco · Cisco IOS and IOS XE · CVSS 8.6 · 2018-03-28 | 8.6 | 7.8% | 2018-03-28 |
| CVE-2018-0174In CISA KEVExploitedA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affec…Cisco · Cisco IOS and IOS XE · CVSS 8.6 · 2018-03-28 | 8.6 | 7.6% | 2018-03-28 |
| CVE-2018-0173In CISA KEVExploitedA vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an una…Cisco · Cisco IOS and IOS XE · CVSS 8.6 · 2018-03-28 | 8.6 | 7.6% | 2018-03-28 |
| CVE-2020-1040In CISA KEVExploitedA remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, a…Microsoft · Windows Server · CVSS 9 · 2020-07-14 | 9.0 | 7.6% | 2020-07-14 |
| CVE-2018-0158In CISA KEVExploitedA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a me…Cisco · Cisco IOS and IOS XE · CVSS 8.6 · 2018-03-28 | 8.6 | 7.2% | 2018-03-28 |
| CVE-2017-12235In CISA KEVExploitedA vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker…Cisco · Cisco IOS · CVSS 7.5 · 2017-09-28 | 7.5 | 7.1% | 2017-09-28 |
| CVE-2017-12234In CISA KEVExploitedMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to ca…Cisco · Cisco IOS · CVSS 7.5 · 2017-09-28 | 7.5 | 7.1% | 2017-09-28 |
| CVE-2017-12233In CISA KEVExploitedMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to ca…Cisco · Cisco IOS · CVSS 7.5 · 2017-09-28 | 7.5 | 7.1% | 2017-09-28 |
| CVE-2018-0159In CISA KEVExploitedA vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remo…Cisco · Cisco IOS and IOS XE · CVSS 7.5 · 2018-03-28 | 7.5 | 6.9% | 2018-03-28 |
| CVE-2022-3075In CISA KEVExploitedInsufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e…Google · Chrome · CVSS 9.6 · 2022-09-26 | 9.6 | 5.8% | 2022-09-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.