Fallos del tipo CWE-20

5399 resultados

Validação inadequada de entrada

A aplicação recebe dados de fontes externas (usuário, API, arquivo) sem verificar se estão no formato, tamanho ou tipo esperado antes de usá-los. Isso permite que um atacante envie dados malformados ou maliciosos que podem causar erros, corrupção de dados, execução de código ou acesso não autorizado.

Ejemplo

Um formulário que aceita um número de idade sem validar se é um inteiro positivo entre 0 e 150. Um atacante envia idade=-5 ou idade='DROP TABLE users;' via SQL, e o código processa isso diretamente no banco sem sanitização, causando dano.

Cómo mitigar

Valide TODA entrada externa: verificar tipo, tamanho, formato e intervalo permitido antes de usar. Use whitelists (aceitar apenas valores conhecidos como seguros) em vez de blacklists, e aplique sanitização ou prepared statements para dados que vão em queries. Testes de entrada fuzzing também ajudam a encontrar gaps.

CVE-2019-12655HIGHCisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service VulnerabilityEPSS 2.0%CVE-2021-21404HIGHCrash due to malformed relay protocol messageEPSS 2.0%CVE-2020-1695HIGHA flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an impropeEPSS 2.0%CVE-2020-36332—A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threaEPSS 2.0%CVE-2017-3846—A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticateEPSS 2.0%CVE-2019-11255MEDIUMKubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutationEPSS 2.0%CVE-2021-1302HIGHCisco SD-WAN vManage Authorization Bypass VulnerabilitiesEPSS 2.0%CVE-2020-9743MEDIUMHTML injection in AEM's content editor componentEPSS 2.0%CVE-2018-15428—Cisco IOS XR Software Border Gateway Protocol Denial of Service VulnerabilityEPSS 2.0%CVE-2021-20273—A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.EPSS 2.0%CVE-2021-23192—A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragmenEPSS 2.0%CVE-2020-10289HIGHRVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132EPSS 1.9%CVE-2020-8187—Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform EPSS 1.9%CVE-2019-13541—In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processiEPSS 1.9%CVE-2019-10191MEDIUMA vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-securEPSS 1.9%CVE-2024-46901LOWApache Subversion: mod_dav_svn denial-of-service via control characters in pathsEPSS 1.9%CVE-2020-3128HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.9%CVE-2017-6792—A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attackEPSS 1.9%CVE-2019-1947HIGHCisco Email Security Appliance Denial of Service VulnerabilityEPSS 1.9%CVE-2020-27253—A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauEPSS 1.9%