CWE-358 Improperly Implemented Security Check for Standard
baseThe product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (394)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7965US | high8.8OT critical | KEV | ||
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur… | ||||
| CVE-2021-38003US | high8.8OT critical | KEV | ||
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2020-16013US | high8.8OT critical | KEV | ||
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2018-1270US | critical9.8 | Exploit | ||
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a si… | ||||
| CVE-2018-1275US | critical9.8 | — | ||
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a si… | ||||
| CVE-2017-15663US | high7.5 | Exploit | ||
In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contr… | ||||
| CVE-2021-26414US | medium4.3 | Exploit | ||
Windows DCOM Server Security Feature Bypass | ||||
| CVE-2016-10229US | critical9.8 | — | ||
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a rec… | ||||
| CVE-2017-15665US | high7.5 | Exploit | ||
In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control p… | ||||
| CVE-2017-15664US | high7.5 | Exploit | ||
In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to cont… | ||||
| CVE-2017-15662US | high7.5 | Exploit | ||
In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contro… | ||||
| CVE-2018-19409US | critical9.8 | — | ||
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used. | ||||
| CVE-2018-0268US | critical10.0 | — | ||
A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication an… | ||||
| CVE-2019-6742US | critical9.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit t… | ||||
| CVE-2024-3156US | high8.8 | — | ||
Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (C… | ||||
| CVE-2023-30459US | high7.2OT elevated | Exploit | ||
SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server set… | ||||
| CVE-2019-9893US | critical9.8 | — | ||
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccom… | ||||
| CVE-2015-8805US | critical9.8 | — | ||
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST ellipti… | ||||
| CVE-2015-8804US | critical9.8 | — | ||
x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which… | ||||
| CVE-2015-8803US | critical9.8 | — | ||
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST ellipti… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan