CWE-710 - Improper Adherence to Coding Standards

Home/CWEs/CWE info/

CWE-710

Abstraction:
Pillar

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Adherence to Coding Standards

Description: The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Common Consequences: Scope: Other
Impact: Other

Release Date:
2008-09-09

Latest Modification Date:
2024-02-29

Top Security News

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

Hackers now use AppDomain Injection to drop CobaltStrike beacons

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Download: CIS Critical Security Controls v8.1

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform

Common Alerts

Medium.htaccess Information Leak

HighExternal Redirect

MediumHTTP to HTTPS Insecure Transition in Form Post

HighSQL Injection - Hypersonic SQL

MediumHTTP Parameter Override

LowX-AspNet-Version Response Header

MediumContent Security Policy (CSP) Header Not Set

LowX-Backend-Server Header Information Leak

Medium.env Information Leak

InformationalGraphQL Server Implementation Identified

Latest CVE List

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability

CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability

Common CWEs

CWE-127 Buffer Under-read

CWE-211 Externally-Generated Error Message Containing Sensitive Information

CWE-138 Improper Neutralization of Special Elements

MediumCWE-375 Returning a Mutable Object to an Untrusted Caller

CWE-620 Unverified Password Change

CWE-203 Observable Discrepancy

CWE-274 Improper Handling of Insufficient Privileges

CWE-1301 Insufficient or Incomplete Data Removal within Hardware Component

CWE-1253 Incorrect Selection of Fuse Values

CWE-267 Privilege Defined With Unsafe Actions

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-710 - Improper Adherence to Coding Standards

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.