CWE-573: Improper Following of Specification by Caller
The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- ocaml cstruct The cstruct package before 6.3.0 for OCaml mishandles indexes. 7.3 High
- openbsd openssh sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... 4.8 Medium
- zcashfoundation zebra Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output 8.3 High
- zcashfoundation zebra Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling 8.3 High
- zcashfoundation zebra, zfnd zebra-script, zebrad +2 more ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling 9.3 Critical
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 more Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding 8.2 High
- bsv-blockchain ts-sdk BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability 5.4 Medium
- arthurfiorette axios-cache-interceptor, axios-cache-interceptor axios cache interceptor +1 more axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header 6.0 Medium
- snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 more Snowflake Connector for C/C++ retries malformed requests 3.3 Low
- juniper junos, juniper networks junos os +1 more Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device 8.7 High
- moodle A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and... 4.3 Medium