The vulnerability of the nf_conntrack_tcp_packet() function in the net/netfilter/nf_conntrack_proto_tcp.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter kernel of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to compromise th...

Improper Security Configuration

Spring Framework is vulnerable to Improper Security Configuration. The vulnerability is due to response cookies being serialized without the SameSite attribute in WebFlux applications using the Jetty 12 Core reactive adapter...

CVE-2026-65058 Trezor Safe improper security check in on-device display

Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum signtx / signtxeip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata...

ROS-20260717-73-0007

The vulnerability of the ServiceWorker application interface of Google Chrome browser is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

PT-2026-58157

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. This issue is particularly critical for server...

CVE-2026-54431: Improperly Implemented Security Check for Standard

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

CVE-2026-12577 DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability...

CVE-2026-12577

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability...

CVE-2026-12577 DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability...

EUVD-2026-40932

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability...

Improperly Implemented Security Check for Standard

Overview Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard due to improper enforcement of security rules during concurrent execution of Security Mode Command and N2 handover procedures. An attacker can cause handover failures and disrupt networ...

CVE-2026-44474: Improperly Implemented Security Check for Standard

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could send a NAS Security Mode Command while an N2 handover was still pending and vice versa. Concurrent...

CVE-2026-44475: Improperly Implemented Security Check for Standard

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored values. A malicious gNB can overwrite Ella Core's stored UE security capabilities for any UE with...

Improperly Implemented Security Check for Standard

Overview Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard due to improper verification of UE Security Capabilities in the PathSwitchRequest messages. An attacker can alter stored security capabilities for any user equipment by sending a crafte...

Improperly Implemented Security Check for Standard

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard via the sortnatural and sort filters, which bypass the iownPropertyOnly security...

CVE-2026-35679: Improperly Implemented Security Check for Standard

Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of security aspects in the fredextint module. This vulnerability may lead to...

The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows a intruder to execute arbitrary codes.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, allows a intruder to execute arbitrary code.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system’s web server is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the OPTIONS method from a remote location...

IBM WebSphere Application Server 8.5.5.28 < 8.5.5.30 / 9.0.5.24 < 9.0.5.27 (7260217)

The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7260217 advisory. - IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings...