CWE-358 · Cryptography
Improperly Implemented Security Check for Standard
128CVEs
SortMost likely exploited
128 CVEs with CWE-358 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-7965In CISA KEVExploitedInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu…Google · Chrome · CVSS 8.8 · 2024-08-21 | 8.8 | 19% | 2024-08-21 |
| CVE-2017-15663In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to cont…Flexense · Disk Pulse · 2018-01-10 | – | 13% | 2018-01-10 |
| CVE-2016-10229udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a re…Linux · Linux Kernel · 2017-04-04 | – | 13% | 2017-04-04 |
| CVE-2024-2174Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec…Google · Chrome · CVSS 8.8 · 2024-03-06 | 8.8 | 13% | 2024-03-06 |
| CVE-2017-15665In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control…Flexense · Diskboss · 2018-01-10 | – | 9.1% | 2018-01-10 |
| CVE-2017-15664In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to con…Flexense · Syncbreeze · 2018-01-10 | – | 9.1% | 2018-01-10 |
| CVE-2017-15662In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contr…Flexense · Vx Search · 2018-01-10 | – | 9.1% | 2018-01-10 |
| CVE-2017-15706As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description o…Apache Software Foundation · Apache Tomcat · 2018-01-31 | – | 6.1% | 2018-01-31 |
| CVE-2019-6742This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit…Samsung · Galaxy S9 · CVSS 10 · 2019-06-03 | 10.0 | 5.9% | 2019-06-03 |
| CVE-2020-25686A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By de…Thekelleys · dnsmasq · 2021-01-20 | – | 5.5% | 2021-01-20 |
| CVE-2018-0268A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication a…Cisco · Cisco Digital Network Architecture Center · 2018-05-17 | – | 4.9% | 2018-05-17 |
| CVE-2020-25684A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port i…Thekelleys · dnsmasq · 2021-01-20 | – | 4.2% | 2021-01-20 |
| CVE-2017-15105A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence…NLnet Labs · unbound · 2018-01-23 | – | 3.2% | 2018-01-23 |
| CVE-2017-15107A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-e…Simon Kelley · dnsmasq · 2018-01-23 | – | 2.6% | 2018-01-23 |
| CVE-2018-16860A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC…SAMBA · samba · CVSS 7.5 · 2019-07-31 | 7.5 | 2.5% | 2019-07-31 |
| CVE-2016-8614A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches th…Red Hat · Ansible · CVSS 6.3 · 2018-07-31 | 6.3 | 2.5% | 2018-07-31 |
| CVE-2021-3448A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An…Thekelleys · dnsmasq · CVSS 4 · 2021-04-08 | 4.0 | 2.3% | 2021-04-08 |
| CVE-2018-16857Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 min…Samba · samba · CVSS 7.4 · 2018-11-28 | 7.4 | 2.3% | 2018-11-28 |
| CVE-2016-3017IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations.IBM Corporation · Access Manager · 2017-02-01 | – | 2.2% | 2017-02-01 |
| CVE-2016-8635It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private…Mozilla · nss · CVSS 5.3 · 2018-08-01 | 5.3 | 2.0% | 2018-08-01 |
| CVE-2017-2611Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup di…Jenkins · jenkins · CVSS 4.3 · 2018-05-08 | 4.3 | 1.9% | 2018-05-08 |
| CVE-2022-25152ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvalsITarian · ITarian platform (SAAS / on-premise) · CVSS 9.9 · 2022-06-08 | 9.9 | 1.9% | 2022-06-08 |
| CVE-2018-1243iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerabilityDell EMC · iDRAC6 · CVSS 7.5 · 2018-07-02 | 7.5 | 1.8% | 2018-07-02 |
| CVE-2017-12303A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…Cisco · Cisco Web Security Appliance · 2017-11-16 | – | 1.6% | 2017-11-16 |
| CVE-2017-2612In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download…Jenkins · jenkins · CVSS 5.4 · 2018-05-15 | 5.4 | 1.5% | 2018-05-15 |
| CVE-2019-3894It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not neces…Red Hat · wildfly · CVSS 5.4 · 2019-05-03 | 5.4 | 1.5% | 2019-05-03 |
| CVE-2019-3806An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination o…Power DNS · pdns-recursor · CVSS 5.4 · 2019-01-29 | 5.4 | 1.5% | 2019-01-29 |
| CVE-2016-10834cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).Cpanel · Cpanel · 2019-08-01 | – | 1.4% | 2019-08-01 |
| CVE-2017-2604In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY…Jenkins · jenkins · CVSS 4.3 · 2018-05-15 | 4.3 | 1.3% | 2018-05-15 |
| CVE-2017-7177Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.Openinfosecfoundation · Suricata · 2017-03-18 | – | 1.3% | 2017-03-18 |
| CVE-2014-4843Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sen…Ibm · Curam Social Program Management · 2017-06-08 | – | 1.3% | 2017-06-08 |
| CVE-2016-10825cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).Cpanel · Cpanel · 2019-08-01 | – | 1.1% | 2019-08-01 |
| CVE-2021-34791Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass VulnerabilitiesCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 4.7 · 2021-10-27 | 4.7 | 1.1% | 2021-10-27 |
| CVE-2021-34790Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass VulnerabilitiesCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 4.7 · 2021-10-27 | 4.7 | 1.1% | 2021-10-27 |
| CVE-2023-28601Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoo…Zoom Video Communications, Inc. · Zoom for Windows Client · CVSS 8.3 · 2023-06-13 | 8.3 | 1.0% | 2023-06-13 |
| CVE-2026-70174.NET Remote Code Execution VulnerabilityMicrosoft · .NET 10.0 runtime · CVSS 8.8 · 2026-10-13 | 8.8 | 0.9% | 2026-10-13 |
| CVE-2023-40445The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persistently fail to lock.Apple · iOS and iPadOS · CVSS 7.5 · 2023-10-25 | 7.5 | 0.9% | 2023-10-25 |
| CVE-2023-3266A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An…CyberPower · PowerPanel Enterprise · CVSS 9.8 · 2023-08-14 | 9.8 | 0.9% | 2023-08-14 |
| CVE-2018-20934cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).Cpanel · Cpanel · 2019-08-01 | – | 0.9% | 2019-08-01 |
| CVE-2019-14823A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a…Dogtag · JSS · CVSS 6.8 · 2019-10-14 | 6.8 | 0.9% | 2019-10-14 |
| CVE-2024-3845Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium securi…Google · Chrome · CVSS 9.8 · 2024-04-17 | 9.8 | 0.9% | 2024-04-17 |
| CVE-2024-6101Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium sec…Google · Chrome · CVSS 8.8 · 2024-06-19 | 8.8 | 0.8% | 2024-06-19 |
| CVE-2021-31375Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassedJuniper Networks · Junos OS · CVSS 7.2 · 2021-10-19 | 7.2 | 0.8% | 2021-10-19 |
| CVE-2020-1728A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-re…Redhat · keycloak · CVSS 4.8 · 2020-04-06 | 4.8 | 0.8% | 2020-04-06 |
| CVE-2022-38732SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.Netapp · SnapCenter · CVSS 7.5 · 2022-09-29 | 7.5 | 0.7% | 2022-09-29 |
| CVE-2025-8204Comodo Dragon HSTS security checkComodo · Dragon · CVSS 3.1 · 2025-07-26 | 3.1 | 0.7% | 2025-07-26 |
| CVE-2024-3844Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium secur…Google · Chrome · CVSS 4.3 · 2024-04-17 | 4.3 | 0.7% | 2024-04-17 |
| CVE-2020-10743It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw…Elastic · Kibana · 2021-06-02 | – | 0.7% | 2021-06-02 |
| CVE-2023-2585Keycloak: client access via device auth request spoofRed Hat · Red Hat Single Sign-On 7 · CVSS 3.5 · 2023-12-21 | 3.5 | 0.7% | 2023-12-21 |
| CVE-2026-96303Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft · PowerShell 7.4 · CVSS 6.5 · 2026-10-13 | 6.5 | 0.7% | 2026-10-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.