CWE-358: Improperly Implemented Security Check for Standard
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
A kind of CWE-573 Improper Following of Specification by Caller.
From the CWE List. © The MITRE Corporation.
Newest
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities4.7 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed7.2 High
- redhat openshiftA flaw was found in the OpenShift web console, where the access token is stored in the browser's...6.1 Medium
- dnsmasq, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +1 more +3 moreA flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for...4.0 Medium
- birb-digital wrongthinkPartial secret key disclosure, improper safety number calculation, & inadequate encryption strength8.1 High
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...3.7 Low
- lenovo bios, qitian 4500 firmware, qitian b4550 firmware +14 more +16 moreIn some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect...2.4 Low
- elastic kibana, redhat openshift container platform +1 moreIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Medium
- [unknown] keycloak, quarkus +1 moreImproper Restriction of Rendered UI Layers or Frames in Keycloak4.8 Medium
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreESConfig Tool able to edit configuration for newer version5.0 Medium
- dogtag jss, jss cryptomanager project cryptomanager, redhat enterprise linux +6 more +8 moreA flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager...6.8 Medium
- cpanelcPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents...8.1 High
- cpanelcPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).8.8 High
- cpanelcPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned...6.5 Medium
- samsung galaxy s9, galaxy s9 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...10.0 Critical
- heimdal project heimdal, samba +1 moreA flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4...7.5 High
- red hat wildfly, redhat jboss enterprise application platform +1 moreIt was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from...5.4 Medium
- powerdns recursor, power dns pdns-recursor +1 moreAn issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks...5.4 Medium
- [unknown] sambaSamba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad...7.4 High
- marshmallow project marshmallowIn marshmallow library the schema "only" option treats an empty list as implying no "only" option5.3 Medium
- opensuse libzypplibzypp does not reevaluate malicious rpms once downloaded7.8 High
- dell idrac8, dell emc idrac6, idrac7 +4 more +6 moreiDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability7.5 High
- cisco digital network architecture centerA vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA)...10.0 Critical
- [unknown] jenkinsImproper Authentication in Jenkins4.3 Medium
- [unknown] jenkinsIncorrect Permission Assignment for Critical Resource in Jenkins5.4 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins Core4.3 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for Standard9.8 Critical
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpoints9.8 Critical
- apache tomcatInconsistent documentation in Apache Tomcat5.3 Medium
- dnsmasqA vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78....7.5 High
- powerdns authoritativeAn issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4...7.1 High
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...5.3 Medium
- flexense diskbossIn Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service...7.5 High
- flexense syncbreezeIn Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of...7.5 High
- flexense disk pulseIn Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service...7.5 High
- flexense vx searchIn Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service...7.5 High
- huawei technologies co., ltd. honor 5s, huawei honor 5s firmware +1 moreHuawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory...4.6 Medium
- cisco asyncos, web security appliance +1 moreA vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS...5.3 Medium
- schneider-electric modbus firmwareA Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus...5.3 Medium
- red hat ansibleAnsible apt_key module does not properly verify key fingerprint6.3 Medium
- ibm curam social program managementCuram Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4...5.3 Medium
- linux kernel, google android +1 moreudp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP...9.8 Critical
- openinfosecfoundation suricataSuricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the...7.5 High
- ibm corporation access manager, ibm security access manager 9.0 firmware, security access manager for mobile 8.0 firmware +2 more +4 moreIBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information...7.5 High
- mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 moreIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...5.3 Medium