Vulnerabilities > Improperly Implemented Security Check for Standard

DATE CVE VULNERABILITY TITLE RISK
2019-08-01 CVE-2016-10834 Improperly Implemented Security Check for Standard vulnerability in Cpanel
cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).
network
low complexity
cpanel CWE-358
8.8
2019-08-01 CVE-2016-10825 Improperly Implemented Security Check for Standard vulnerability in Cpanel
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).
network
low complexity
cpanel CWE-358
8.1
2019-08-01 CVE-2018-20934 Improperly Implemented Security Check for Standard vulnerability in Cpanel
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
network
low complexity
cpanel CWE-358
6.5
2019-07-31 CVE-2018-16860 Improperly Implemented Security Check for Standard vulnerability in multiple products
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode.
network
high complexity
samba heimdal-project CWE-358
7.5
2018-11-28 CVE-2018-16857 Improperly Implemented Security Check for Standard vulnerability in Samba 4.9.0/4.9.1/4.9.2
Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all.
network
high complexity
samba CWE-358
5.9
2018-07-02 CVE-2018-1243 Improperly Implemented Security Check for Standard vulnerability in Dell products
Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability.
network
low complexity
dell CWE-358
7.5
2018-05-17 CVE-2018-0268 Improperly Implemented Security Check for Standard vulnerability in Cisco Digital Network Architecture Center
A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges.
network
low complexity
cisco CWE-358
critical
10.0
2018-01-31 CVE-2017-15706 Improperly Implemented Security Check for Standard vulnerability in Apache Tomcat
As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute.
network
low complexity
apache CWE-358
5.3
2018-01-23 CVE-2017-15091 Improperly Implemented Security Check for Standard vulnerability in Powerdns Authoritative
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword.
network
low complexity
powerdns CWE-358
7.1
2018-01-10 CVE-2017-15665 Improperly Implemented Security Check for Standard vulnerability in Flexense Diskboss 8.5.12
In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability.
network
low complexity
flexense CWE-358
7.5