CWE-358: Improperly Implemented Security Check for Standard
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
A kind of CWE-573 Improper Following of Specification by Caller.
From the CWE List. © The MITRE Corporation.
Newest
- zephyrproject zephyrBluetooth: Out-Of-Context le_conn_rsp Handling4.3 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.1 Medium
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproperly implemented security check for standard in the DDRIO configuration for some Intel(R)...4.5 Medium- comodo dragonComodo Dragon HSTS security check2.3 Low
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version...4.9 Medium
- authzed spicedbSpiceDB checks involving relations with caveats can result in no permission when permission is expected3.7 Low
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a...8.8 High
- fortinet fortisandboxA stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox...6.4 Medium
- fortinet antivirus engine, forticlientwindows +1 moreFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6...4.7 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.4 Medium
- arcinfo pcvueClient Secret not checked with OAuth Password grant type2.3 Low
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of special elements in output used by a downstream component (...3.6 Low
- fortinet fortiadcAn improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web...3.4 Low
- google androidIn wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for...7.8 High
- google chrome, chromium v8, microsoft edge chromium +2 moreInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...2.1 Low
- google chromeInappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72...4.7 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote...8.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app...7.8 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu500 firmware +1 moreA vulnerability exists in the RTU500 that allows for authenticated and authorized users to...7.2 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an...5.5 Medium
- weave desktopAn issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a...7.8 High
- lenovo fingerprint reader, synaptics fingerprint readers +1 moreAn authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint...6.3 Medium
- rpyc project rpycRPyC's missing security check results in code execution when using numpy.array on the server-side.8.4 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...8.8 High
- google chromeInappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote...6.5 Medium
- vantage6vantage6 Node accepts non-whitelisted algorithms from malicious server7.2 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17...7.5 High
- stleary json-javaDoS Vulnerability in JSON-Java7.5 High
- microfocus cobol server, enterprise developer, enterprise server +4 more +6 moreAuthentication bypass in OpenText (Micro Focus) Enterprise Server9.8 Critical
- cyberpower powerpanel enterprise, powerpanel server +1 moreA non-feature complete authentication mechanism exists in the production application allowing an...9.8 Critical
- huawei emui, harmonyos +1 moreParameter verification vulnerability in the installd module. Successful exploitation of this...9.1 Critical
- red hat single sign-on 7, single sign-on 7.6 for rhel 7, single sign-on 7.6 for rhel 8 +7 more +9 moreKeycloak: client access via device auth request spoof3.5 Low
- zoom, zoom video communications, inc. for windows client +1 moreZoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the...8.3 High
- eugeny russhrussh may use insecure Diffie-Hellman keys5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop7.5 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreFailure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss...4.4 Medium
- fluenx deepl pro api translation, unknown deepl pro api translation plugin +1 moreDeepL Pro API Translation < 1.7.5 - API Key Disclosure7.5 High
- netapp snapcenterSnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which...7.5 High
- sonicwall hosted email security, email security +1 moreImproperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads...7.5 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2)....4.3 Medium
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2)....4.3 Medium
- itarian platform (saas / on-premise), on-premise, saas service desk +2 moreITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals9.9 Critical
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +88 more +90 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL6.5 Medium
- Show moreLoading…