CWE-358: Improperly Implemented Security Check for Standard
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
A kind of CWE-573 Improper Following of Specification by Caller.
From the CWE List. © The MITRE Corporation.
Newest
- hickory-dns Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass 6.3 Medium
- hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion 6.3 Medium
- openidentityplatform openam OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow 7.6 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 4.2 Medium
- microsoft powershell, powershell 7.6, microsoft powershell 7.4 +1 more +3 more Microsoft PowerShell Security Feature Bypass Vulnerability 6.5 Medium
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +11 more +13 more .NET Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft PowerShell Security Feature Bypass Vulnerability 6.5 Medium
- authlib Authlib library contains a signature‑verification bypass vulnerability 9.8 Critical
- nlnet labs unbound A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path 3.7 Low
- trezor safe 3, safe 5, safe 7 +2 more Trezor Safe improper security check in on-device display 5.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 more Secure Boot Security Feature Bypass Vulnerability 7.8 High
- openidc liboauth2 Improper Data Validation in liboauth2 5.1 Medium
- deltaww dvp80es3 DVP80ES3 Improperly Implemented Security Check for Standard vulnerability 8.7 High
- apache software foundation kerby, red hat amq clients, data grid 8 +4 more +6 more Apache Kerby: Kerberos Pre-Authentication Bypass 7.3 High
- mcp-tool-shop-org backpropagate, @mcptoolshop/backpropagate +1 more Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication 9.3 Critical
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control 9.8 Critical
- google chrome Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53... 6.5 Medium
- google chrome Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote... 6.1 Medium
- apple macos A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.5.... 5.5 Medium
- mantisbt MantisBT has a Content Security Policy bypass via attachments 7.6 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes 7.5 High
- ellanetworks core Ella Core: Handover failures during concurrent Security Mode Command 3.7 Low
- ellanetworks core Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest 6.1 Medium
- ellanetworks core Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse 7.1 High
- huggingface diffusers, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 more Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components 8.8 High
- free5gc free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover 3.7 Low
- free5gc free5GC: UE Security Capability bypass on NGAP PathSwitchRequest 6.1 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 more HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header 3.7 Low
- hcl dfxanalytics HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability 5.3 Medium
- eaton intelligent power protector, ipp software +1 more A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an... 5.9 Medium
- google chrome Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote... 4.3 Medium
- zcash zcashd Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions,... 3.5 Low
- suitecrm SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass 9.1 Critical
- wolfssl Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2 5.5 Medium
- hcaptcha for wp WordPress hCaptcha for WP plugin <= 4.21.1 - Broken Access Control vulnerability 5.3 Medium
- ibm websphere application server IBM WebSphere Application Server could provide weaker than expected security 4.4 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 more Org.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grant 8.8 High
- yokogawa electric corporation fast/tools A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... 8.8 High
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... 6.3 Medium
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The... 2.1 Low
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The... 6.3 Medium
- naver whale browser, navercorp whale +1 more Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar... 9.1 Critical
- bullwall ransomware containment BullWall Ransomware Containment file count detection bypass 5.3 Medium
- huawei harmonyos Vulnerability of improper criterion security check in the card module. Impact: Successful... 5.3 Medium
- huawei harmonyos Vulnerability of improper criterion security check in the call module. Impact: Successful... 7.3 High
- naver whale browser, navercorp whale +1 more Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a... 7.5 High
- naver whale browser, navercorp whale +1 more Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab... 9.8 Critical
- fortinet fortios, fortiproxy +1 more An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0... 4.8 Medium
- hcl software unica platform, hcltech unica +1 more HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) 4.0 Medium
- oisf suricata Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets 7.5 High
- Show olderLoading…