CWE-710 - Improper Adherence to Coding Standards

Home/CWEs/CWE info/

CWE-710

Abstraction:
Pillar

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Adherence to Coding Standards

Description: The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Common Consequences: Scope: Other
Impact: Other

Release Date:
2008-09-09

Latest Modification Date:
2024-02-29

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Recorded Future CEO applauds "undesirable" designation by Russia

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)

Google Chrome uses AI to analyze pages in new scam detection feature

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Microsoft fixes exploited zero-day (CVE-2024-49138)

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

LowCookie without SameSite Attribute

CSP

InformationalRe-examine Cache-control Directives

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-560 Use of umask() with chmod-style Argument

CWE-334 Small Space of Random Values

CWE-1220 Insufficient Granularity of Access Control

CWE-1301 Insufficient or Incomplete Data Removal within Hardware Component

CWE-86 Improper Neutralization of Invalid Characters in Identifiers in Web Pages

HighCWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CWE-596 DEPRECATED: Incorrect Semantic Object Comparison

CWE-466 Return of Pointer Value Outside of Expected Range

CWE-1072 Data Resource Access without Use of Connection Pooling

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-710 - Improper Adherence to Coding Standards

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.