CWE-657: Violation of Secure Design Principles
The product violates well-established principles for secure design.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- adobe campaign classic, campaign +1 more Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657) 7.5 High
- mervinpraison praisonaiagents, praison praisonai +1 more PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode) 10.0 Critical
- rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings 8.3 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more Acrobat Reader | Violation of Secure Design Principles (CWE-657) 4.0 Medium
- citeum opencti OpenCTI bypass of protected attribute update 6.3 Medium
- huawei harmonyos Vulnerability of improper log information control in the UI framework module Impact: Successful... 6.6 Medium
- cisolutions ci out of office manager ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key. 6.5 Medium
- citeum opencti OpenCTI Authenticated Privilege Escalation 8.3 High
-
passbolt/passbolt_apiPackagist Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab" 5.5 Medium - huawei emui, harmonyos +1 more Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful... 7.5 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw 7.8 High
- adobe experience manager AEM Violation of Secure Design Principles Security feature bypass 5.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 more Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation 6.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 more Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts 2.5 Low
- adobe connect Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings 5.4 Medium
- adobe magento commerce, magento +1 more Magento Commerce insecure storage of sensitive documentation 7.5 High
- xcb project xcb Unchecked Return Value in xcb 8.8 High
- xcb project xcb Out of bounds read in xcb 9.8 Critical
- xcb project xcb Arbitrary return types in xcb 9.8 Critical
- xcb project xcb Unchecked Return Value in xcb 9.8 Critical
- raw-cpuid project raw-cpuid Error on unsupported architectures in raw-cpuid 5.5 Medium
- raw-cpuid project raw-cpuid Soundness issue in raw-cpuid 7.5 High
- cgc project cgc Non-atomic writes in cgc 5.9 Medium
- cgc project cgc Multiple soundness issues in cgc 5.9 Medium
- cgc project cgc Data races in cgc 5.9 Medium
- hackerone nextcloud server, nextcloud server +1 more A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed... 5.3 Medium
-
fake-staticcrates.io fake-static allows converting any reference into a `'static` reference No score - nextcloud Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and... 4.9 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation 7.8 High
- amd zu11eg firmware, zu15eg firmware, zu17eg firmware +38 more +40 more A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an... 5.5 Medium
- schneider-electric modbus firmware A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus... 5.3 Medium