Weakness (CWE)
CWE-684: Incorrect Provision of Specified Functionality
The code does not function according to its published specifications, potentially leading to incorrect usage.
How to prevent it (1 mitigation)
-
Implementation
Ensure that your code strictly conforms to specifications.
Source: MITRE CWE-684
4 results · Clear filters · Feed
-
Critical 9.3
ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/sr…
-
Critical 9.8
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in …
-
Critical 9.1
Incorrect Provision of Specified Functionality vulnerability in MESbook
Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMU…
-
Critical 9.1
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i8…